CVE-2026-65210

Full vulnerability record from the local CVENow database.

Description

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

Severity

MEDIUM

CVSS score

4.9 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

def9a96e-e099-41a9-bfac-30fd4f82c411

Published

2026-10-27 08:16:54.240000

Last modified

2026-10-27 15:54:05.340000

View original CVE JSON

{
  "id": "CVE-2026-65210",
  "sourceIdentifier": "def9a96e-e099-41a9-bfac-30fd4f82c411",
  "published": "2026-10-27T08:16:54.240",
  "lastModified": "2026-10-27T15:54:05.340",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role."
    }
  ],
  "affected": [
    {
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
      "affectedData": [
        {
          "vendor": "SMCI",
          "product": "MBD-X12SPI",
          "defaultStatus": "affected",
          "platforms": [
            "BMC"
          ],
          "versions": [
            {
              "version": "01.07.20",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 4.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 3.6
      }
    ]
  },
  "weaknesses": [
    {
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-552"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1",
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411"
    }
  ]
}