CVE-2018-13787
Medium
Description
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
SeverityMedium
CVSS6.7
Exploit probability—
ProductSupermicro C9x299 Firmware
PublishedJul 9, 2018
First seenJul 9, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| supermicro c9x299_firmware | No range specified | — |
| supermicro x11ssz_firmware | No range specified | — |
| supermicro x11ssv_firmware | No range specified | — |
| supermicro x11ssql_firmware | No range specified | — |
| supermicro x11ssq_firmware | No range specified | — |
| supermicro x11ssn_firmware | No range specified | — |
| supermicro x11srm_firmware | No range specified | — |
| supermicro x11sra_firmware | No range specified | — |
| supermicro x11sba_firmware | No range specified | — |
| supermicro x11sat_firmware | No range specified | — |
| supermicro x11sae_m_firmware | No range specified | — |
| supermicro x11sae_firmware | No range specified | — |
| supermicro x10srw_firmware | No range specified | — |
| supermicro x10srm_firmware | No range specified | — |
| supermicro x10srl_firmware | No range specified | — |
| supermicro x10sri_firmware | No range specified | — |
| supermicro x10srh_firmware | No range specified | — |
| supermicro x10srg_firmware | No range specified | — |
| supermicro x10srd_firmware | No range specified | — |
| supermicro x10sra_firmware | No range specified | — |
| supermicro x10sdvt_firmware | No range specified | — |
| supermicro x10sdvf_firmware | No range specified | — |
| supermicro x10sde_firmware | No range specified | — |
| supermicro x10sddf_firmware | No range specified | — |
| supermicro x10sba_firmware | No range specified | — |
| supermicro x10qrh_firmware | No range specified | — |
| supermicro x10dsn_firmware | No range specified | — |
| supermicro x10dscp_firmware | No range specified | — |
| supermicro x10dsc_firmware | No range specified | — |
| supermicro x10drx_firmware | No range specified | — |
| supermicro x10drwn_firmware | No range specified | — |
| supermicro x10drw_firmware | No range specified | — |
| supermicro x10drux_firmware | No range specified | — |
| supermicro x10drul_firmware | No range specified | — |
| supermicro x10dru_firmware | No range specified | — |
| supermicro x10drts_firmware | No range specified | — |
| supermicro x10drtps_firmware | No range specified | — |
| supermicro x10drtl_firmware | No range specified | — |
| supermicro x10drth_firmware | No range specified | — |
| supermicro x10drtb_firmware | No range specified | — |
| supermicro x10drt_firmware | No range specified | — |
| supermicro x10drs_firmware | No range specified | — |
| supermicro x10drln_firmware | No range specified | — |
| supermicro x10drlc_firmware | No range specified | — |
| supermicro x10drl_firmware | No range specified | — |
| supermicro x10dri1_firmware | No range specified | — |
| supermicro x10drh4_firmware | No range specified | — |
| supermicro x10drh_firmware | No range specified | — |
| supermicro x10drgo_firmware | No range specified | — |
| supermicro x10drgh_firmware | No range specified | — |
| supermicro x10drg_firmware | No range specified | — |
| supermicro x10drfr_firmware | No range specified | — |
| supermicro x10drfg_firmware | No range specified | — |
| supermicro x10drff_firmware | No range specified | — |
| supermicro x10drdl_firmware | No range specified | — |
| supermicro x10drd_firmware | No range specified | — |
| supermicro x10drc_firmware | No range specified | — |
| supermicro x10dgo_firmware | No range specified | — |
| supermicro x10ddwn_firmware | No range specified | — |
| supermicro x10ddwi_firmware | No range specified | — |
| supermicro x10ddw4_firmware | No range specified | — |
| supermicro x10ddw3_firmware | No range specified | — |
| supermicro x10dax_firmware | No range specified | — |
| supermicro x10dali_firmware | No range specified | — |
| supermicro x10dal_firmware | No range specified | — |
| supermicro x10dai_firmware | No range specified | — |
| supermicro b10drt_firmware | No range specified | — |
| supermicro b10dri_firmware | No range specified | — |
| supermicro b10drg_firmware | No range specified | — |
| supermicro x9sae_firmware | No range specified | — |
| supermicro x9drth_firmware | No range specified | — |
| supermicro x9drgqf_firmware | No range specified | — |
| supermicro x9drffp_firmware | No range specified | — |
| supermicro x9drf_firmware | No range specified | — |
| supermicro x9dbl_firmware | No range specified | — |
| supermicro x8siu_firmware | No range specified | — |
| supermicro x8sit_firmware | No range specified | — |
| supermicro x8sil_firmware | No range specified | — |
| supermicro x8sie_firmware | No range specified | — |
| supermicro x8sia_firmware | No range specified | — |
| supermicro k1spi_firmware | No range specified | — |
| supermicro k1spes_firmware | No range specified | — |
| supermicro c7z97oc_firmware | No range specified | — |
| supermicro c7z97mf_firmware | No range specified | — |
| supermicro c7z87oc_firmware | No range specified | — |
| supermicro c7z370l_firmware | No range specified | — |
| supermicro c7z370i_firmware | No range specified | — |
| supermicro c7z270p_firmware | No range specified | — |
| supermicro c7z270m_firmware | No range specified | — |
| supermicro c7z270l_firmware | No range specified | — |
| supermicro c7z270cg_firmware | No range specified | — |
| supermicro c7z270c_firmware | No range specified | — |
| supermicro c7z170oce_firmware | No range specified | — |
| supermicro c7z170o_firmware | No range specified | — |
| supermicro c7z170_firmware | No range specified | — |
| supermicro c7x99oc_firmware | No range specified | — |
| supermicro c7q270_firmware | No range specified | — |
| supermicro c7h270_firmware | No range specified | — |
| supermicro c7b250_firmware | No range specified | — |
| supermicro b1sd2tf_firmware | No range specified | — |
| supermicro b1sa4_firmware | No range specified | — |
| supermicro b1dri_firmware | No range specified | — |
| supermicro a2sav_firmware | No range specified | — |
| supermicro a2sap_firmware | No range specified | — |
| supermicro a2san_firmware | No range specified | — |
| supermicro a1srm_firmware | No range specified | — |
| supermicro a1sam_firmware | No range specified | — |
| supermicro a1sai1_firmware | No range specified | — |
| supermicro a1sai_firmware | No range specified | — |
| supermicro a1sa_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.