CVE-2025-12007CWE-347

Supermicro BMC firmware update validation bypass

High · published January 16, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.5th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-01-16T08:39Z
EPSS history
Timeline
  • 16 JAN 08:39Z
    Supermicro BMC firmware update validation bypass
    cvelistv5