Vulnerabilitymedium
Two New Supermicro BMC Bugs Allow Malicious Firmware to Evade Root of Trust Security
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-10237 | There: An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process | 7.2 | <1% | ||
CVE-2024-10238+1 related CVE | A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 | 7.2 | <1% | ||
CVE-2025-6198+1 related CVE | There: An attacker can update the system firmware with a specially crafted image | 7.2 | <1% |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Sep 23, 2025 Firmware Security / Vulnerability Cybersecurity researchers have disclosed details of two security vulnerabilities impacting Supermicro Baseboard Management Controller (BMC) firmware that could potentially allow attackers to bypass crucial verification steps and update the system with a specially crafted image.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.