๐Ÿ” CVE Alert

CVE-2025-12007

HIGH 8.4

Supermicro BMC firmware update validation bypass

CVSS Score
8.4
EPSS Score
0.0%
EPSS Percentile
0th

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image.

CWE CWE-347
Vendor smci
Product x13sem-f
Published Jan 16, 2026
Last Updated Feb 26, 2026
Stay Ahead of the Next One

Get instant alerts for smci x13sem-f

Be the first to know when new high vulnerabilities affecting smci x13sem-f are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

SMCI / X13SEM-F
01.05.02

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
supermicro.com: https://www.supermicro.com/en/support/security_BMC_IPMI_Jan_2026

Credits

Binarly Inc.