Malwarecritical
Supermicro server motherboards can be infected with unremovable malware
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-10237 | There: An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process | 7.2 | <1% | ||
CVE-2025-6198+1 related CVE | There: An attacker can update the system firmware with a specially crafted image | 7.2 | <1% |
From the original article
1 min read at arstechnica.com
Servers running on motherboards sold by Supermicro contain high-severity vulnerabilities that can allow hackers to remotely install malicious firmware that runs even before the operating system, making infections impossible to detect or remove without unusual protections in place.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.