VulnerabilityModified

CVE-2019-16649

CRITICAL 10.0EPSS 0.92%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.92%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.

CVSS 3.1: 10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS: 0.92% probability · 58th percentile
CISA KEV: Not listed
Weakness: CWE-287, CWE-326, CWE-522
Affected: supermicro/x11dai-n firmware · supermicro/x11dac firmware · supermicro/x11dph-tq firmware · supermicro/x11dph-i firmware · supermicro/x11dph-t firmware · supermicro/x11dps-re firmware · supermicro/x11dsf-e firmware · supermicro/x11dsn-ts firmware · supermicro/x11dsn-tsq firmware · supermicro/x11dsc\+ firmware · supermicro/x11ddw-nt firmware · supermicro/x11ddw-l firmware · supermicro/x11dgq firmware · supermicro/x11dpff-sn firmware · supermicro/x11dpfr-sn firmware · supermicro/x11dpfr-s firmware · supermicro/x11dpt-ps firmware · supermicro/x11dpt-b firmware · supermicro/x11dpt-bh firmware · supermicro/x11dpt-l firmware · +40 more
Source: cve@mitre.org

References

https://eclypsium.com/2019/09/03/usbanywhere-bmc-vulnerability-opens-servers-to-remote-attack/Third Party Advisory
https://github.com/eclypsium/USBAnywhereThird Party Advisory
https://www.supermicro.com/support/security_BMC_virtual_media.cfmVendor Advisory
https://eclypsium.com/2019/09/03/usbanywhere-bmc-vulnerability-opens-servers-to-remote-attack/Third Party Advisory
https://github.com/eclypsium/USBAnywhereThird Party Advisory
https://www.supermicro.com/support/security_BMC_virtual_media.cfmVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.