X12Spi
Monthly
Unauthenticated remote attackers who can reach the Supermicro X12SPI BMC's IPMI interface may be able to bypass integrity and encryption enforcement and execute arbitrary commands against an active IPMI session. The flaw is rated CVSS 9.8 (CWE-306), but exposure is limited by the need for network reachability to the BMC management interface and an existing active session. The vuln.today decision label is act_now, while EPSS is 0.40% (34th percentile) and no CISA KEV entry or public exploit was identified in the provided data.
Supermicro's X12SPI BMC firmware (01.07.20) does not enforce the integrity and encryption requirements it is supposed to apply to IPMI commands, so an attacker who can reach the management interface can craft packets that execute arbitrary commands inside an already-active IPMI session. The CVSS vector is unauthenticated (PR:N), but exploitation is conditional: the BMC must be network-reachable and a live session must already exist for the attacker to act against, which is why the assessed severity combines high confidentiality, integrity and availability impact with high attack complexity. There is no KEV listing, EPSS is 0.34% (27th percentile) and no public exploit code was identified at time of analysis; the vuln.today decision label is this_week, a genuine but non-emergency priority.
Unauthenticated remote attackers who can reach the Supermicro X12SPI BMC's IPMI interface may be able to bypass integrity and encryption enforcement and execute arbitrary commands against an active IPMI session. The flaw is rated CVSS 9.8 (CWE-306), but exposure is limited by the need for network reachability to the BMC management interface and an existing active session. The vuln.today decision label is act_now, while EPSS is 0.40% (34th percentile) and no CISA KEV entry or public exploit was identified in the provided data.
Supermicro's X12SPI BMC firmware (01.07.20) does not enforce the integrity and encryption requirements it is supposed to apply to IPMI commands, so an attacker who can reach the management interface can craft packets that execute arbitrary commands inside an already-active IPMI session. The CVSS vector is unauthenticated (PR:N), but exploitation is conditional: the BMC must be network-reachable and a live session must already exist for the attacker to act against, which is why the assessed severity combines high confidentiality, integrity and availability impact with high attack complexity. There is no KEV listing, EPSS is 0.34% (27th percentile) and no public exploit code was identified at time of analysis; the vuln.today decision label is this_week, a genuine but non-emergency priority.