X11Sae Firmware
CVE-2018-13787
MEDIUM
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
AnalysisAI
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware. Affected products include: Supermicro X11Ssz Firmware, Supermicro X11Ssv Firmware, Supermicro X11Ssql Firmware, Supermicro X11Ssq Firmware, Supermicro X11Ssn Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in X11Sae Firmware
View allThe web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implemen
The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via
A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementatio
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions. Rated medium severi
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today