CVE Program partner

Supermicro

Super Micro Computer, Inc.

API
CVEs, 365 days914 all time, 0 rejected
Quality96%median 99%
CVSS by the CNA88%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA11%lower is better
OrganisationSuper Micro Computer, Inc.
RoleCNA
TypeVendor
Reports tomitre
ScopeSupermicro branded products, managed system, or software projects.
Advisorieshttps://www.supermicro.com/en/support/security_center#!advisories

Latest CVEs · RSS

  • CVE-2026-3821 2026-07-22 · CVSS 8.8
    Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability
  • CVE-2026-3820 2026-06-04 · CVSS 7.2
    There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR.  An attacker may obtain administrator privileges and inject specially
  • CVE-2025-12007 2026-01-16
    There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a speciall
  • CVE-2025-12006 2026-01-16 · CVSS 7.2
    There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can update the system firmware with a speciall
  • CVE-2025-8727 2025-11-18 · CVSS 7.2
    There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially
  • CVE-2025-8404 2025-11-18 · CVSS 5.5
    Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a cra
  • CVE-2025-8076 2025-11-18 · CVSS 7.2
    There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially
  • CVE-2025-7623 2025-11-18 · CVSS 5.4
    Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH
  • CVE-2025-7704 2025-11-13 · CVSS 5.4
    Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability
  • CVE-2025-7937 2025-09-19 · CVSS 7.2
    There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially
  • CVE-2025-6198 2025-09-19 · CVSS 7.2
    There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a speciall
  • CVE-2024-10239 2025-02-04 · CVSS 7.2
    A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with administrator privileges can upload a special
  • CVE-2024-10238 2025-02-04 · CVSS 7.2
    A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6. An attacker can upload a specially crafted image that will c
  • CVE-2024-10237 2025-02-04 · CVSS 7.2
    There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker can modify the firmware to bypass BMC in

All CVE Program partners