CVE-2026-65213: falha de média gravidade em SMCI MBD-X12SPI
Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.6epss 0.5%
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
SMCI · MBD-X12SPICVEs relacionadas — SMCI MBD-X12SPI
No mesmo produto, das mais perigosas para as menos.
CVE-2026-65219HIGHSupermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerabilityEPSS 0.5%CVE-2026-65211HIGHSupermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerabilityEPSS 0.3%CVE-2026-65220HIGHSupermicro BMC IPMI feature contains a Privilege escalation vulnerabilityEPSS 0.3%CVE-2026-65210MEDIUMSupermicro BMC IPMI feature contains Arbitrary File Access vulnerabilityEPSS 0.2%CVE-2026-18451LOWSupermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch tokenEPSS 0.2%