Skip to content
SSMCI
Products
| Product | CVEs | Exploited | Latest |
| MBD-X12SPI | 6 | – | Oct 27, 2026 |
| MBD-X13SEDW-F | 3 | – | Nov 18, 2025 |
| MBD-X12DPG-OA6 | 3 | – | Feb 4, 2025 |
| X12SPI | 2 | – | Oct 27, 2026 |
| X13SEM-F | 2 | – | Jan 16, 2026 |
| X13SEDW-F | 1 | – | Nov 18, 2025 |
| AS-2115HS-TNR | 1 | – | Jun 4, 2026 |
| X14DBG-DAP,X14DBI | 1 | – | Jul 22, 2026 |
| MBD-X12STW | 1 | – | Sep 19, 2025 |
| MBD-X12STW-F | 1 | – | Oct 27, 2026 |
| SYS-111C-NR | 1 | – | Nov 13, 2025 |
| X12STW-F | 1 | – | Jan 16, 2026 |
Exploited and recent CVEs
-
CVE-2026-65213
Medium 6.6
Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
0.5%
-
CVE-2026-65211
High 7.2
Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
0.3%
-
CVE-2026-65210
Medium 4.9
Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
0.2%
-
CVE-2026-65220
High 8.8
Supermicro BMC IPMI feature contains a Privilege escalation vulnerability
0.3%
-
CVE-2026-65219
High 7.4
Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
0.5%
-
CVE-2026-18451
Low 3.1
Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token
0.2%
-
CVE-2026-18450
Critical 9.8
Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
0.4%
-
CVE-2026-18449
High 7.5
Supermicro BMC contains a SMCRAKP Fixed Key vulnerability
0.3%
-
CVE-2026-16521
High 7.2
Supermicro BMC's syslog feature contains a command injection vulnerability
0.9%
-
CVE-2026-3821
High 8.8
Supermicro SMASH service contain an Arbitrary code execution issue
0.6%
-
CVE-2026-3820
High 7.2
Supermicro BMC's SMTP service contains a command injection vulnerability
0.4%
-
CVE-2025-12007
High 8.4
Supermicro BMC firmware update validation bypass
0.1%
-
CVE-2025-12006
High 7.2
Supermicro BMC firmware update validation bypass
0.3%
-
CVE-2025-8727
High 7.2
A stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL).
0.4%
-
CVE-2025-8404
Medium 5.5
Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library
0.3%
-
CVE-2025-8076
High 7.2
A stack buffer overflow vulnerability exists in the Supermicro BMC Web function
0.4%
-
CVE-2025-7623
Medium 5.4
Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability
0.3%
-
CVE-2025-7704
Medium 5.4
Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability
0.2%
-
CVE-2025-7937
High 7.2
Supermicro BMC firmware update validation bypass
0.3%
-
CVE-2025-6198
High 7.2
Supermicro BMC firmware update validation bypass
0.3%
-
CVE-2024-10239
High 7.2
fld->used_bytes without sanity check causes stack overflow
0.5%
-
CVE-2024-10238
High 7.2
fld->used_bytes without sanity check causes stack overflow
0.5%
-
CVE-2024-10237
High 7.2
SMC BMC Firmware Image Authentication Design Issue
0.3%