CVE-2025-7937

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image.

Score

CVSS 3.1 7.2 High

Status

Deferred - def9a96e-e099-41a9-bfac-30fd4f82c411

Published

2025-09-19

Last modified

2026-02-26

Weaknesses

CWE-347

Affected products

• Mbd-x12stw (Smci)

References

• https://www.supermicro.com/en/support/security_BMC_IPMI_Sept_2025