VULNERABILITY INTELLIGENCE
CVE-2024-10237
CVSS score7.2 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2025-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process
Weakness classification
- def9a96e-e099-41a9-bfac-30fd4f82c411: CWE-345