CVE-2026-65213

Full vulnerability record from the local CVENow database.

Description

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC

Severity

MEDIUM

CVSS score

6.6 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

def9a96e-e099-41a9-bfac-30fd4f82c411

Published

2026-10-27 09:16:34.503000

Last modified

2026-10-27 15:54:05.340000

View original CVE JSON

{
  "id": "CVE-2026-65213",
  "sourceIdentifier": "def9a96e-e099-41a9-bfac-30fd4f82c411",
  "published": "2026-10-27T09:16:34.503",
  "lastModified": "2026-10-27T15:54:05.340",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC"
    }
  ],
  "affected": [
    {
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
      "affectedData": [
        {
          "vendor": "SMCI",
          "product": "MBD-X12SPI",
          "defaultStatus": "affected",
          "platforms": [
            "BMC"
          ],
          "versions": [
            {
              "version": "01.07.20",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 6.6,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 0.7,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1",
      "source": "def9a96e-e099-41a9-bfac-30fd4f82c411"
    }
  ]
}