SM
Vendor
SMCI
23
CVEs
0
On KEV
9
New 30D
Products
MB8.8
MBD-X12SPI
SMCI
6 CVEs0 on KEV6 new
X19.8
X12SPI
SMCI
2 CVEs0 on KEV2 new
MB7.2
MBD-X12STW-F
SMCI
1 CVEs0 on KEV1 new
MB7.2
MBD-X12DPG-OA6
SMCI
3 CVEs0 on KEV0 new
MB7.2
MBD-X13SEDW-F
SMCI
3 CVEs0 on KEV0 new
X18.4
X13SEM-F
SMCI
2 CVEs0 on KEV0 new
AS7.2
AS-2115HS-TNR
SMCI
1 CVEs0 on KEV0 new
MB7.2
MBD-X12STW
SMCI
1 CVEs0 on KEV0 new
SY5.4
SYS-111C-NR
SMCI
1 CVEs0 on KEV0 new
X17.2
X12STW-F
SMCI
1 CVEs0 on KEV0 new
X17.2
X13SEDW-F
SMCI
1 CVEs0 on KEV0 new
X18.8
X14DBG-DAP,X14DBI
SMCI
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-65213 New | MB MBD-X12SPI SMCI | 6.6 | Oct 27 | Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability |
| CVE-2026-65211 New | MB MBD-X12SPI SMCI | 7.2 | Oct 27 | Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability |
| CVE-2026-65210 New | MB MBD-X12SPI SMCI | 4.9 | Oct 27 | Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability |
| CVE-2026-65220 New | MB MBD-X12SPI SMCI | 8.8 | Oct 27 | Supermicro BMC IPMI feature contains a Privilege escalation vulnerability |
| CVE-2026-65219 New | MB MBD-X12SPI SMCI | 7.4 | Oct 27 | Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability |
| CVE-2026-18451 New | MB MBD-X12SPI SMCI | 3.1 | Oct 27 | Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token |
| CVE-2026-18450 New | X1 X12SPI SMCI | 9.8 | Oct 27 | Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability |
| CVE-2026-18449 New | X1 X12SPI SMCI | 7.5 | Oct 27 | Supermicro BMC contains a SMCRAKP Fixed Key vulnerability |
| CVE-2026-16521 New | MB MBD-X12STW-F SMCI | 7.2 | Oct 27 | Supermicro BMC's syslog feature contains a command injection vulnerability |
| CVE-2026-3821 | X1 X14DBG-DAP,X14DBI SMCI | 8.8 | Jul 22 | Supermicro SMASH service contain an Arbitrary code execution issue |
| CVE-2026-3820 | AS AS-2115HS-TNR SMCI | 7.2 | Jun 4 | Supermicro BMC's SMTP service contains a command injection vulnerability |
| CVE-2025-12007 | X1 X13SEM-F SMCI | 8.4 | Jan 16 | Supermicro BMC firmware update validation bypass |
| CVE-2025-12006 | X1 X12STW-F SMCI | 7.2 | Jan 16 | Supermicro BMC firmware update validation bypass |
| CVE-2025-8727 | X1 X13SEDW-F SMCI | 7.2 | Nov 18 | A stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL). |
| CVE-2025-8404 | MB MBD-X13SEDW-F SMCI | 5.5 | Nov 18 | Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library |
| CVE-2025-8076 | MB MBD-X13SEDW-F SMCI | 7.2 | Nov 18 | A stack buffer overflow vulnerability exists in the Supermicro BMC Web function |
| CVE-2025-7623 | MB MBD-X13SEDW-F SMCI | 5.4 | Nov 18 | Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability |
| CVE-2025-7704 | SY SYS-111C-NR SMCI | 5.4 | Nov 13 | Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability |
| CVE-2025-7937 | MB MBD-X12STW SMCI | 7.2 | Sep 19 | Supermicro BMC firmware update validation bypass |
| CVE-2025-6198 | X1 X13SEM-F SMCI | 7.2 | Sep 19 | Supermicro BMC firmware update validation bypass |
| CVE-2024-10239 | MB MBD-X12DPG-OA6 SMCI | 7.2 | Feb 4 | fld->used_bytes without sanity check causes stack overflow |
| CVE-2024-10238 | MB MBD-X12DPG-OA6 SMCI | 7.2 | Feb 4 | fld->used_bytes without sanity check causes stack overflow |
| CVE-2024-10237 | MB MBD-X12DPG-OA6 SMCI | 7.2 | Feb 4 | SMC BMC Firmware Image Authentication Design Issue |