Skip to content
OpenAdvisories
High · 8.4 CVE-2025-12007 EUVD-2026-2965GHSA-cg7q-j82r-xv2m

Supermicro BMC firmware update validation bypass

Published Jan 16, 2026 · Updated Feb 26, 2026 · Assigned by Supermicro

Description

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image.

Affected products

VendorProductAffectedFixed
SMCI X13SEM-F 01.05.02 fixed in 01.06.10

References