CVSS 3.0
6.7 mediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2018-13787
Medium (6.7) in supermicro. EPSS 0.4% chance of exploitation in the next 30 days.
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- supermicro:a1sa_firmware
- supermicro:a1sai1_firmware
- supermicro:a1sai_firmware
- supermicro:a1sam_firmware
- supermicro:a1srm_firmware
- supermicro:a2san_firmware
- supermicro:a2sap_firmware
- supermicro:a2sav_firmware
- supermicro:b10drg_firmware
- supermicro:b10dri_firmware
- supermicro:b10drt_firmware
- supermicro:b1dri_firmware
- supermicro:b1sa4_firmware
- supermicro:b1sd2tf_firmware
- supermicro:c7b250_firmware
- supermicro:c7h270_firmware
- supermicro:c7q270_firmware
- supermicro:c7x99oc_firmware
- supermicro:c7z170_firmware
- supermicro:c7z170o_firmware
- supermicro:c7z170oce_firmware
- supermicro:c7z270c_firmware
- supermicro:c7z270cg_firmware
- supermicro:c7z270l_firmware
- supermicro:c7z270m_firmware
- supermicro:c7z270p_firmware
- supermicro:c7z370i_firmware
- supermicro:c7z370l_firmware
- supermicro:c7z87oc_firmware
- supermicro:c7z97mf_firmware
- supermicro:c7z97oc_firmware
- supermicro:c9x299_firmware
- supermicro:k1spes_firmware
- supermicro:k1spi_firmware
- supermicro:x10dai_firmware
- supermicro:x10dal_firmware
- supermicro:x10dali_firmware
- supermicro:x10dax_firmware
- supermicro:x10ddw3_firmware
- supermicro:x10ddw4_firmware
- supermicro:x10ddwi_firmware
- supermicro:x10ddwn_firmware
- supermicro:x10dgo_firmware
- supermicro:x10drc_firmware
- supermicro:x10drd_firmware
- supermicro:x10drdl_firmware
- supermicro:x10drff_firmware
- supermicro:x10drfg_firmware
- supermicro:x10drfr_firmware
- supermicro:x10drg_firmware
References
- https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/
- https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/
- https://www.supermicro.com/support/security_Intel-SA-00088.cfm?pg=X10#tab
- https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/
- https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/