CVE-2024-36432

Published: Jul 15, 2024Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 6.0

Source: MITRE (Secondary)

Description

An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with BIOS firmware before 4.4.

Related CWEs

CWE-1246

Improper Write Handling in Limited-write Non-Volatile Memories

The product does not implement or incorrectly implements wear leveling operations in limited-write non-volatile memories.

References (4)

https://www.supermicro.com/en/support/security_center#%21advisories

Source: cve@mitre.org

https://www.supermicro.com/zh_tw/support/security_BIOS_Jul_2024

Source: cve@mitre.org

https://www.supermicro.com/en/support/security_center#%21advisories

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.supermicro.com/zh_tw/support/security_BIOS_Jul_2024

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.