CVE-2018-13787
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
- Score
- CVSS 3.0 6.7 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2018-07-09
- Last modified
- 2024-08-05
Affected products
- A1sa Firmware (Supermicro)
- A1sai1 Firmware (Supermicro)
- A1sai Firmware (Supermicro)
- A1sam Firmware (Supermicro)
- A1srm Firmware (Supermicro)
- A2san Firmware (Supermicro)
- A2sap Firmware (Supermicro)
- A2sav Firmware (Supermicro)
- B10drg Firmware (Supermicro)
- B10dri Firmware (Supermicro)
- B10drt Firmware (Supermicro)
- B1dri Firmware (Supermicro)
- B1sa4 Firmware (Supermicro)
- B1sd2tf Firmware (Supermicro)
- C7b250 Firmware (Supermicro)
- C7h270 Firmware (Supermicro)
- C7q270 Firmware (Supermicro)
- C7x99oc Firmware (Supermicro)
- C7z170 Firmware (Supermicro)
- C7z170o Firmware (Supermicro)
- C7z170oce Firmware (Supermicro)
- C7z270c Firmware (Supermicro)
- C7z270cg Firmware (Supermicro)
- C7z270l Firmware (Supermicro)
- C7z270m Firmware (Supermicro)
- C7z270p Firmware (Supermicro)
- C7z370i Firmware (Supermicro)
- C7z370l Firmware (Supermicro)
- C7z87oc Firmware (Supermicro)
- C7z97mf Firmware (Supermicro)
- C7z97oc Firmware (Supermicro)
- C9x299 Firmware (Supermicro)
- K1spes Firmware (Supermicro)
- K1spi Firmware (Supermicro)
- X10dai Firmware (Supermicro)
- X10dal Firmware (Supermicro)
- X10dali Firmware (Supermicro)
- X10dax Firmware (Supermicro)
- X10ddw3 Firmware (Supermicro)
- X10ddw4 Firmware (Supermicro)
- X10ddwi Firmware (Supermicro)
- X10ddwn Firmware (Supermicro)
- X10dgo Firmware (Supermicro)
- X10drc Firmware (Supermicro)
- X10drd Firmware (Supermicro)
- X10drdl Firmware (Supermicro)
- X10drff Firmware (Supermicro)
- X10drfg Firmware (Supermicro)
- X10drfr Firmware (Supermicro)
- X10drg Firmware (Supermicro)
- X10drgh Firmware (Supermicro)
- X10drgo Firmware (Supermicro)
- X10drh4 Firmware (Supermicro)
- X10drh Firmware (Supermicro)
- X10dri1 Firmware (Supermicro)
- X10drl Firmware (Supermicro)
- X10drlc Firmware (Supermicro)
- X10drln Firmware (Supermicro)
- X10drs Firmware (Supermicro)
- X10drt Firmware (Supermicro)
- X10drtb Firmware (Supermicro)
- X10drth Firmware (Supermicro)
- X10drtl Firmware (Supermicro)
- X10drtps Firmware (Supermicro)
- X10drts Firmware (Supermicro)
- X10dru Firmware (Supermicro)
- X10drul Firmware (Supermicro)
- X10drux Firmware (Supermicro)
- X10drw Firmware (Supermicro)
- X10drwn Firmware (Supermicro)
- X10drx Firmware (Supermicro)
- X10dsc Firmware (Supermicro)
- X10dscp Firmware (Supermicro)
- X10dsn Firmware (Supermicro)
- X10qrh Firmware (Supermicro)
- X10sba Firmware (Supermicro)
- X10sddf Firmware (Supermicro)
- X10sde Firmware (Supermicro)
- X10sdvf Firmware (Supermicro)
- X10sdvt Firmware (Supermicro)
- X10sra Firmware (Supermicro)
- X10srd Firmware (Supermicro)
- X10srg Firmware (Supermicro)
- X10srh Firmware (Supermicro)
- X10sri Firmware (Supermicro)
- X10srl Firmware (Supermicro)
- X10srm Firmware (Supermicro)
- X10srw Firmware (Supermicro)
- X11sae Firmware (Supermicro)
- X11sae M Firmware (Supermicro)
- X11sat Firmware (Supermicro)
- X11sba Firmware (Supermicro)
- X11sra Firmware (Supermicro)
- X11srm Firmware (Supermicro)
- X11ssn Firmware (Supermicro)
- X11ssq Firmware (Supermicro)
- X11ssql Firmware (Supermicro)
- X11ssv Firmware (Supermicro)
- X11ssz Firmware (Supermicro)
- X8sia Firmware (Supermicro)
References
- https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/
- https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/
- https://www.supermicro.com/support/security_Intel-SA-00088.cfm?pg=X10#tab
