CVE-2024-36435

Published: Jul 11, 2024Modified: Jun 17, 2026Deferred

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: MITRE (Secondary)

Description

An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules). An unauthenticated user can post crafted data to the interface that triggers a stack buffer overflow, and may lead to arbitrary remote code execution on a BMC.

Related CWEs

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (2)

https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Jul_2024

Source: cve@mitre.org

https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Jul_2024

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.