CVE-2026-65211: falha de alta gravidade em SMCI MBD-X12SPI
Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 0.3%
This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
SMCI · MBD-X12SPICVEs relacionadas — SMCI MBD-X12SPI
No mesmo produto, das mais perigosas para as menos.
CVE-2026-65213MEDIUMSupermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerabilityEPSS 0.5%CVE-2026-65219HIGHSupermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerabilityEPSS 0.5%CVE-2026-65220HIGHSupermicro BMC IPMI feature contains a Privilege escalation vulnerabilityEPSS 0.3%CVE-2026-65210MEDIUMSupermicro BMC IPMI feature contains Arbitrary File Access vulnerabilityEPSS 0.2%CVE-2026-18451LOWSupermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch tokenEPSS 0.2%