Vulnerabilities in SMCI
13 resultsCVE-2024-10238HIGHfld->used_bytes without sanity check causes stack overflowEPSS 0.5%CVE-2024-10239HIGHfld->used_bytes without sanity check causes stack overflowEPSS 0.5%CVE-2026-3820HIGHSupermicro BMC's SMTP service contains a command injection vulnerabilityEPSS 0.4%CVE-2025-6198HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2025-7937HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2025-8727HIGHA stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL).EPSS 0.3%CVE-2025-8076HIGHA stack buffer overflow vulnerability exists in the Supermicro BMC Web functionEPSS 0.3%CVE-2025-8404MEDIUMStack buffer overflow vulnerability exists in the Supermicro BMC Shared libraryEPSS 0.3%CVE-2025-12006HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2025-7623MEDIUMSupermicro BMC SMASH services has a Stack-based buffer overflow vulnerabilityEPSS 0.2%CVE-2024-10237HIGHSMC BMC Firmware Image Authentication Design IssueEPSS 0.2%CVE-2025-7704MEDIUMSupermicro BMC SMASH services has a Stack-based buffer overflow vulnerabilityEPSS 0.2%CVE-2025-12007HIGHSupermicro BMC firmware update validation bypassEPSS 0.1%