Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability

MBD-X12SPI · CWE-552 · CWE-552

AffectedMBD-X12SPI

FixNo fix listed yet.

PublishedOct 27, 08:07 · Supermicro

ScoredOct 27 · 4.9 · Supermicro

Exploit code publicNone known · checked 21:18 UTC

ExploitedNone known · CISA KEV checked 22:07 UTC

What we know

No known exploitation. CISA KEV, checked 22:07 UTC.

No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.

An attacker needs network access and an account. CVSS: network, high privileges.

A successful attack can read data. CVSS impact.

Description

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

From Supermicro

Affected and fixed versions

ProductAffectedFixed inMBD-X12SPI01.07.20–

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1 · supermicro.com

Other CVEs in MBD-X12SPI

All 5 →

6.6Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability · CVE-2026-65213Oct 27 7.2Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability · CVE-2026-65211Oct 27 8.8Supermicro BMC IPMI feature contains a Privilege escalation vulnerability · CVE-2026-65220Oct 27