CVE-2026-65211

Full vulnerability record from the local CVENow database.

Description

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

Severity

HIGH

CVSS score

7.2 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

def9a96e-e099-41a9-bfac-30fd4f82c411

Published

2026-10-27 09:16:33.400000

Last modified

2026-10-27 15:54:05.340000

View original CVE JSON

{
  "id": "CVE-2026-65211",
  "sourceIdentifier": "def9a96e-e099-41a9-bfac-30fd4f82c411",
  "published": "2026-10-27T09:16:33.400",
  "lastModified": "2026-10-27T15:54:05.340",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system."
    }
  ],
  "affected": [
    {
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
      "affectedData": [
        {
          "vendor": "SMCI",
          "product": "MBD-X12SPI",
          "defaultStatus": "affected",
          "platforms": [
            "BMC"
          ],
          "versions": [
            {
              "version": "01.07.20",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1",
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411"
    }
  ]
}