Approved changes feed: RSS · Atom

cpe:2.3:a:smci:mbd-x12spi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSmci (87ce2d19-d3a6-5e4c-a676-697b31a0a0d9)
ProductMbd X12Spi (4716f8d8-c4fc-531d-a1a8-7341275b5d8c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18451 vulnerable 2026-11-03 10:17:40.810738 Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token
LOW (3.1)
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.
Published: 2026-10-27T07:51:10.336Z
Updated: 2026-11-04T14:59:34.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65213 vulnerable 2026-11-03 10:16:21.207778 Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
MEDIUM (6.6)
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC
Published: 2026-10-27T08:15:32.294Z
Updated: 2026-11-04T14:58:49.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65210 vulnerable 2026-11-03 10:16:20.527881 Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
MEDIUM (4.9)
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
Published: 2026-10-27T08:07:16.704Z
Updated: 2026-11-04T14:59:05.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65211 vulnerable 2026-11-03 10:16:20.433029 Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
HIGH (7.2)
This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.
Published: 2026-10-27T08:12:15.451Z
Updated: 2026-11-04T14:58:56.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65220 vulnerable 2026-11-03 10:16:20.400651 Supermicro BMC IPMI feature contains a Privilege escalation vulnerability
HIGH (8.8)
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
Published: 2026-10-27T08:02:49.783Z
Updated: 2026-11-04T14:59:11.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65219 vulnerable 2026-11-03 10:16:20.350798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.