Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-12006

Supermicro BMC firmware update validation bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Supermicro

Description

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can update the system firmware with a specially crafted image.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SMCI X12STW-F

Default version status: affected

  • fixed in 01.08.08unaffected
  • 01.07.09affected

References