X14Dbg Dap X14Dbi
Monthly
OS command injection in the SMASH (Systems Management Architecture for Server Hardware) service of Supermicro X14DBG-DAP and X14DBI platforms lets an authenticated attacker inject operating-system commands through SMASH's input handling on the Baseboard Management Controller (BMC). Successful exploitation yields arbitrary code execution on the BMC, enabling data-integrity tampering or a denial-of-service of the management controller. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
OS command injection in the SMASH (Systems Management Architecture for Server Hardware) service of Supermicro X14DBG-DAP and X14DBI platforms lets an authenticated attacker inject operating-system commands through SMASH's input handling on the Baseboard Management Controller (BMC). Successful exploitation yields arbitrary code execution on the BMC, enabling data-integrity tampering or a denial-of-service of the management controller. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.