Skip to content
OpenAdvisories
High · 7.2 CVE-2025-7937 EUVD-2025-30206GHSA-gcfh-vw6r-jgv8

Supermicro BMC firmware update validation bypass

Published Sep 19, 2025 · Updated Feb 26, 2026 · Assigned by Supermicro

Description

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image.

Affected products

VendorProductAffectedFixed
SMCI MBD-X12STW 01.06.17 —

References