CVE-2018-13787

—

CVSS 3.0

6.7 medium

EPSS

<1%p35

Published

Jul 9, 2018 (Jul 9, 2018)

Modified

Jun 17, 2026

Description

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.

Vendors: supermicro
Products: x11ssz firmware, x11ssv firmware, x11ssql firmware, x11ssq firmware, x11ssn firmware, x11srm firmware, x11sra firmware, x11sba firmware, x11sat firmware, x11sae m firmware, x11sae firmware, x10srw firmware
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.