Vulnerabilities in SMCI
14 resultsVexday analysis
A Super Micro Computer apresenta um perfil de risco moderado com 14 vulnerabilidades conhecidas, porém nenhuma sob ataque ativo e sem críticas registradas. A fraqueza dominante é stack-based buffer overflow (CWE-121), tradicional em software embarcado; apenas 2 CVEs foram publicadas nos últimos 90 dias, sugerindo que o risco não está em escalação recente.
CVE-2026-3821HIGHSupermicro SMASH service contain an Arbitrary code execution issueEPSS 0.6%CVE-2024-10238HIGHfld->used_bytes without sanity check causes stack overflowEPSS 0.5%CVE-2024-10239HIGHfld->used_bytes without sanity check causes stack overflowEPSS 0.5%CVE-2026-3820HIGHSupermicro BMC's SMTP service contains a command injection vulnerabilityEPSS 0.4%CVE-2025-8076HIGHA stack buffer overflow vulnerability exists in the Supermicro BMC Web functionEPSS 0.3%CVE-2025-8727HIGHA stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL).EPSS 0.3%CVE-2025-8404MEDIUMStack buffer overflow vulnerability exists in the Supermicro BMC Shared libraryEPSS 0.3%CVE-2025-7937HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2025-6198HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2025-12006HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2025-7623MEDIUMSupermicro BMC SMASH services has a Stack-based buffer overflow vulnerabilityEPSS 0.3%CVE-2024-10237HIGHSMC BMC Firmware Image Authentication Design IssueEPSS 0.2%CVE-2025-7704MEDIUMSupermicro BMC SMASH services has a Stack-based buffer overflow vulnerabilityEPSS 0.2%CVE-2025-12007HIGHSupermicro BMC firmware update validation bypassEPSS 0.1%