CVE-2026-65219: falha de alta gravidade em SMCI MBD-X12SPI
Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.4epss 0.5%
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
SMCI · MBD-X12SPICVEs relacionadas — SMCI MBD-X12SPI
No mesmo produto, das mais perigosas para as menos.
CVE-2026-65213MEDIUMSupermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerabilityEPSS 0.5%CVE-2026-65211HIGHSupermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerabilityEPSS 0.3%CVE-2026-65220HIGHSupermicro BMC IPMI feature contains a Privilege escalation vulnerabilityEPSS 0.3%CVE-2026-65210MEDIUMSupermicro BMC IPMI feature contains Arbitrary File Access vulnerabilityEPSS 0.2%CVE-2026-18451LOWSupermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch tokenEPSS 0.2%