Mbd X12Stw F
Monthly
OS command injection in the Supermicro BMC firmware for the MBD-X12STW-F motherboard (version 01.02.08) lets an attacker with high privileges on the management interface inject a command payload into a BMC function, with the payload executing when the related service is restarted. Because the CVSS vector specifies PR:H, exploitation requires pre-existing authenticated high-privilege access to the BMC rather than being reachable by an anonymous remote user, and execution is gated on a subsequent service restart rather than occurring immediately. No confirmed public exploit code and no CISA KEV entry are present; EPSS is 0.88% (59th percentile), and the vendor priority is this_week, making this a high-severity but access-gated issue rather than a drop-everything emergency.
OS command injection in the Supermicro BMC firmware for the MBD-X12STW-F motherboard (version 01.02.08) lets an attacker with high privileges on the management interface inject a command payload into a BMC function, with the payload executing when the related service is restarted. Because the CVSS vector specifies PR:H, exploitation requires pre-existing authenticated high-privilege access to the BMC rather than being reachable by an anonymous remote user, and execution is gated on a subsequent service restart rather than occurring immediately. No confirmed public exploit code and no CISA KEV entry are present; EPSS is 0.88% (59th percentile), and the vendor priority is this_week, making this a high-severity but access-gated issue rather than a drop-everything emergency.