{"cve":"CVE-2018-13787","nvd":{"published":"2018-07-09T18:29:00.560","modified":"2026-06-17T01:40:09.947","status":"Modified","description":"Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":6.7},"cwes":[],"references":["https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/","https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/","https://www.supermicro.com/support/security_Intel-SA-00088.cfm?pg=X10#tab","https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/","https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/"],"products":["supermicro:a1sa_firmware","supermicro:a1sai1_firmware","supermicro:a1sai_firmware","supermicro:a1sam_firmware","supermicro:a1srm_firmware","supermicro:a2san_firmware","supermicro:a2sap_firmware","supermicro:a2sav_firmware","supermicro:b10drg_firmware","supermicro:b10dri_firmware","supermicro:b10drt_firmware","supermicro:b1dri_firmware","supermicro:b1sa4_firmware","supermicro:b1sd2tf_firmware","supermicro:c7b250_firmware","supermicro:c7h270_firmware","supermicro:c7q270_firmware","supermicro:c7x99oc_firmware","supermicro:c7z170_firmware","supermicro:c7z170o_firmware","supermicro:c7z170oce_firmware","supermicro:c7z270c_firmware","supermicro:c7z270cg_firmware","supermicro:c7z270l_firmware","supermicro:c7z270m_firmware","supermicro:c7z270p_firmware","supermicro:c7z370i_firmware","supermicro:c7z370l_firmware","supermicro:c7z87oc_firmware","supermicro:c7z97mf_firmware","supermicro:c7z97oc_firmware","supermicro:c9x299_firmware","supermicro:k1spes_firmware","supermicro:k1spi_firmware","supermicro:x10dai_firmware","supermicro:x10dal_firmware","supermicro:x10dali_firmware","supermicro:x10dax_firmware","supermicro:x10ddw3_firmware","supermicro:x10ddw4_firmware","supermicro:x10ddwi_firmware","supermicro:x10ddwn_firmware","supermicro:x10dgo_firmware","supermicro:x10drc_firmware","supermicro:x10drd_firmware","supermicro:x10drdl_firmware","supermicro:x10drff_firmware","supermicro:x10drfg_firmware","supermicro:x10drfr_firmware","supermicro:x10drg_firmware"],"source":"nvd","synced_at":"2026-10-19T20:51:47.459859389+00:00"},"epss":{"cve":"CVE-2018-13787","score":0.00417,"percentile":0.36084,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}