CVE-2019-16650
Critical
Description
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the server managed by the BMC.
SeverityCritical
CVSS10.0
Exploit probability—
ProductSupermicro X11dai-n Firmware
PublishedSep 21, 2019
First seenSep 21, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| supermicro x11dai-n_firmware | 1.71.5 | — |
| supermicro x11dac_firmware | 1.71.5 | — |
| supermicro x11dph-tq_firmware | 1.71.5 | — |
| supermicro x11dph-i_firmware | 1.71.5 | — |
| supermicro x11dph-t_firmware | 1.71.5 | — |
| supermicro x11dps-re_firmware | 1.71.5 | — |
| supermicro x11dsf-e_firmware | 1.71.5 | — |
| supermicro x11dsn-ts_firmware | 1.71.5 | — |
| supermicro x11dsn-tsq_firmware | 1.71.5 | — |
| supermicro x11dsc\+_firmware | 1.74 | — |
| supermicro x11ddw-nt_firmware | 1.71.5 | — |
| supermicro x11ddw-l_firmware | 1.71.5 | — |
| supermicro x11dgq_firmware | 1.71.5 | — |
| supermicro x11dpff-sn_firmware | 1.71.5 | — |
| supermicro x11dpfr-sn_firmware | 1.71.5 | — |
| supermicro x11dpfr-s_firmware | 1.71.5 | — |
| supermicro x11dpt-ps_firmware | 1.71.5 | — |
| supermicro x11dpt-b_firmware | 1.71.5 | — |
| supermicro x11dpt-bh_firmware | 1.71.5 | — |
| supermicro x11dpt-l_firmware | 3.74 | — |
| supermicro x11dpu_firmware | 1.71.5 | — |
| supermicro x11dpu-v_firmware | 1.71.5 | — |
| supermicro x11dpu-x_firmware | 1.71.5 | — |
| supermicro x11dpu-xll_firmware | 1.71.5 | — |
| supermicro x11dpu-z\+_firmware | 1.71.5 | — |
| supermicro x11dpu-ze\+_firmware | 1.71.5 | — |
| supermicro x11dpg-sn_firmware | 1.71.5 | — |
| supermicro x11dpg-qt_firmware | 1.71.5 | — |
| supermicro x11dpg-ot-cpu_firmware | 1.71.5 | — |
| supermicro x11dpi-nt_firmware | 1.71.5 | — |
| supermicro x11dpi-n_firmware | 1.71.5 | — |
| supermicro x11dpl-i_firmware | 1.71.5 | — |
| supermicro x11dpx-t_firmware | 1.71.5 | — |
| supermicro x11dgo-t_firmware | 1.71.5 | — |
| supermicro x11sca_firmware | 1.71.5 | — |
| supermicro x11sca-f_firmware | 1.71.5 | — |
| supermicro x11sch-f_firmware | 1.23.2 | — |
| supermicro x11sch-ln4f_firmware | 1.23.2 | — |
| supermicro x11sca-w_firmware | 1.71.5 | — |
| supermicro x11scl-f_firmware | 1.23.2 | — |
| supermicro x11scl-ln4f_firmware | 1.23.2 | — |
| supermicro x11scl-if_firmware | 1.23.2 | — |
| supermicro x11scm-f_firmware | 1.23.2 | — |
| supermicro x11scm-ln8f_firmware | 1.23.2 | — |
| supermicro x11scw-f_firmware | 3.75.00 | — |
| supermicro x11spa-t_firmware | 1.71.5 | — |
| supermicro x11spa-tf_firmware | 1.71.5 | — |
| supermicro x11spi-tf_firmware | 1.71.6 | — |
| supermicro x11spl-f_firmware | 1.71.6 | — |
| supermicro x11spm-f_firmware | 1.71.6 | — |
| supermicro x11spm-tf_firmware | 1.71.6 | — |
| supermicro x11spm-tpf_firmware | 1.71.6 | — |
| supermicro x11sph-nctf_firmware | 1.71.6 | — |
| supermicro x11sph-nctpf_firmware | 1.71.6 | — |
| supermicro x11spw-tf_firmware | 1.71.6 | — |
| supermicro x11spw-ctf_firmware | 1.71.6 | — |
| supermicro x11spg-tf_firmware | 1.71.6 | — |
| supermicro x11sri-if_firmware | 3.75.00 | — |
| supermicro x11srl-f_firmware | 3.74.2 | — |
| supermicro x11srm-f_firmware | 1.31.1 | — |
| supermicro x11srm-vf_firmware | 1.31.1 | — |
| supermicro x11ssl-f_firmware | 1.56 | — |
| supermicro x11ssm-f_firmware | 1.56 | — |
| supermicro x11ssl_firmware | 1.56 | — |
| supermicro x11ssm_firmware | 1.56 | — |
| supermicro x11ssh-f_firmware | 1.56 | — |
| supermicro x11ssh-ln4f_firmware | 1.56 | — |
| supermicro x11ssw-4tf_firmware | 1.56 | — |
| supermicro x11ssw-tf_firmware | 1.56 | — |
| supermicro x11ssw-f_firmware | 1.71.5, 3.85.00 | — |
| supermicro x11ssi-ln4f_firmware | 1.71.5 | — |
| supermicro x11ssh-tf_firmware | 1.56 | — |
| supermicro x11ssh-ctf_firmware | 1.56 | — |
| supermicro x11ssl-cf_firmware | 1.56 | — |
| supermicro x11ssl-nf_firmware | 1.56 | — |
| supermicro x11ssh-gf-1585_firmware | 1.56 | — |
| supermicro x11ssh-gf-1585l_firmware | 1.56 | — |
| supermicro x11ssh-gtf-1585_firmware | 1.56 | — |
| supermicro x11ssh-gtf-1585l_firmware | 1.56 | — |
| supermicro b11dpt_firmware | 3.68 | — |
| supermicro b11dpe_firmware | 3.68 | — |
| supermicro b11spe-cpu-tf_firmware | 3.68 | — |
| supermicro b11spe-cpu-25g_firmware | 3.68 | — |
| supermicro b11qpi_firmware | 3.68 | — |
| supermicro x11ssd-f_firmware | 3.68 | — |
| supermicro x11sse-f_firmware | 3.68 | — |
| supermicro b2ss1-cpu_firmware | 3.68 | — |
| supermicro b2ss1-cf_firmware | 3.68 | — |
| supermicro b2ss1-f_firmware | 3.68 | — |
| supermicro b2ss2-f_firmware | 3.68 | — |
| supermicro b2ss1-mtf_firmware | 3.68 | — |
| supermicro b2ss1-h-mtf_firmware | 3.68 | — |
| supermicro b2ss2-mtf_firmware | 3.68 | — |
| supermicro b2ss2-h-mtf_firmware | 3.68 | — |
| supermicro x11scd-f_firmware | 3.68 | — |
| supermicro x11sdd-8c-f_firmware | 3.68 | — |
| supermicro x11sdd-18c-f_firmware | 3.68 | — |
| supermicro x11qph\+_firmware | 1.71.5 | — |
| supermicro x11opi-cpu_firmware | 1.71.5 | — |
| supermicro x11sds-8c_firmware | 3.74.2 | — |
| supermicro x11sds-12c_firmware | 3.74.2 | — |
| supermicro x11sds-16c_firmware | 3.74.2 | — |
| supermicro x10ddw-i_firmware | 3.83 | — |
| supermicro x10ddw-in_firmware | 3.83 | — |
| supermicro x10drs_firmware | 3.83 | — |
| supermicro x10drd-i_firmware | 3.83 | — |
| supermicro x10drd-it_firmware | 3.83 | — |
| supermicro x10drd-int_firmware | 3.83 | — |
| supermicro x10drd-intp_firmware | 3.83 | — |
| supermicro x10drd-itp_firmware | 3.83 | — |
| supermicro x10drd-l_firmware | 3.83 | — |
| supermicro x10drd-lt_firmware | 3.83 | — |
| supermicro x10drd-ltp_firmware | 3.83 | — |
| supermicro x10drx_firmware | 3.83 | — |
| supermicro x10drh-c_firmware | 3.83 | — |
| supermicro x10drh-ct_firmware | 3.83 | — |
| supermicro x10drh-cln4_firmware | 3.83 | — |
| supermicro x10drh-i_firmware | 3.83 | — |
| supermicro x10drh-it_firmware | 3.83 | — |
| supermicro x10drh-iln4_firmware | 3.83 | — |
| supermicro x10dri_firmware | 3.83 | — |
| supermicro x10dri-t_firmware | 3.83 | — |
| supermicro x10drc-ln4\+_firmware | 3.83 | — |
| supermicro x10drc-t4\+_firmware | 3.83 | — |
| supermicro x10dri-ln4\+_firmware | 3.83 | — |
| supermicro x10dri-t4\+_firmware | 3.83 | — |
| supermicro x10drl-ln4_firmware | 3.83 | — |
| supermicro x10drl-i_firmware | 3.83 | — |
| supermicro x10drl-it_firmware | 3.83 | — |
| supermicro x10drl-c_firmware | 3.83 | — |
| supermicro x10drl-ct_firmware | 3.83 | — |
| supermicro x10drt-l_firmware | 3.83 | — |
| supermicro x10drt-libq_firmware | 3.83 | — |
| supermicro x10drt-libf_firmware | 3.83 | — |
| supermicro x10drt-b\+_firmware | 3.83 | — |
| supermicro x10drt-h_firmware | 3.83 | — |
| supermicro x10drt-hibf_firmware | 3.83 | — |
| supermicro x10drt-ps_firmware | 3.83 | — |
| supermicro x10drt-p_firmware | 3.83 | — |
| supermicro x10drt-pt_firmware | 3.83 | — |
| supermicro x10drt-pibq_firmware | 3.83 | — |
| supermicro x10drt-pibf_firmware | 3.83 | — |
| supermicro x10drfr-n_firmware | 3.83 | — |
| supermicro x10drfr-nt_firmware | 3.83 | — |
| supermicro x10drfr_firmware | 3.83 | — |
| supermicro x10drfr-t_firmware | 3.83 | — |
| supermicro x10drff-cg_firmware | 3.83 | — |
| supermicro x10drff-ctg_firmware | 3.83 | — |
| supermicro x10drff-ig_firmware | 3.83 | — |
| supermicro x10drff-itg_firmware | 3.83 | — |
| supermicro x10drff_firmware | 3.83 | — |
| supermicro x10drff-c_firmware | 3.83 | — |
| supermicro x10drw-n_firmware | 3.83 | — |
| supermicro x10drw-nt_firmware | 3.83 | — |
| supermicro x10drw-e_firmware | 3.83 | — |
| supermicro x10drw-et_firmware | 3.83 | — |
| supermicro x10drw-i_firmware | 3.83 | — |
| supermicro x10drw-it_firmware | 3.83 | — |
| supermicro x10dsn-ts_firmware | 3.83 | — |
| supermicro x10drg-ot\+-cpu_firmware | 3.83 | — |
| supermicro x10drg-o\+-cpu_firmware | 3.83 | — |
| supermicro x10dgo-t_firmware | 3.83 | — |
| supermicro x10dgq_firmware | 3.83 | — |
| supermicro x10drg-q_firmware | 3.83 | — |
| supermicro x10drg-h_firmware | 3.83 | — |
| supermicro x10drg-ht_firmware | 3.83 | — |
| supermicro x10dru-i\+_firmware | 3.83 | — |
| supermicro x10dru-x_firmware | 3.83 | — |
| supermicro x10dru-xll_firmware | 3.83 | — |
| supermicro x10dsc\+_firmware | 3.83 | — |
| supermicro x10sra-f_firmware | 3.83 | — |
| supermicro x10sra_firmware | 3.83 | — |
| supermicro x10srd-f_firmware | 3.83 | — |
| supermicro x10srm-f_firmware | 3.83 | — |
| supermicro x10srm-tf_firmware | 3.83 | — |
| supermicro x10srl-f_firmware | 3.83 | — |
| supermicro x10sri-f_firmware | 3.83 | — |
| supermicro x10srh-cf_firmware | 3.83 | — |
| supermicro x10srh-cln4f_firmware | 3.83 | — |
| supermicro x10srg-f_firmware | 3.83 | — |
| supermicro x10srw-f_firmware | 3.83 | — |
| supermicro x10sae_firmware | 3.83 | — |
| supermicro x10sat_firmware | 3.83 | — |
| supermicro x10slx-f_firmware | 3.83 | — |
| supermicro x10sld-f_firmware | 3.83 | — |
| supermicro x10sld-hf_firmware | 3.83 | — |
| supermicro x10sle-f_firmware | 3.83 | — |
| supermicro x10sle-hf_firmware | 3.83 | — |
| supermicro x10sle-df_firmware | 3.83 | — |
| supermicro x10sl7-f_firmware | 3.83 | — |
| supermicro x10sla-f_firmware | 3.83 | — |
| supermicro x10slh-f_firmware | 3.83 | — |
| supermicro x10sll\+-f_firmware | 3.83 | — |
| supermicro x10sll-f_firmware | 3.83 | — |
| supermicro x10sll-sf_firmware | 3.83 | — |
| supermicro x10sll-s_firmware | 3.83 | — |
| supermicro x10slm-f_firmware | 3.83 | — |
| supermicro x10slm\+-f_firmware | 3.83 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.