CVE-2024-36432
High
Description
An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with BIOS firmware before 4.4.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSupermicro X11dpg-hgx2 Firmware
PublishedJul 15, 2024
First seenJul 15, 2024
Weakness typeCWE-1246CWE-1246
How to fix
Update
- supermicro x11dpg-hgx2_firmware4.4 or later
- supermicro x11pdg-qt_firmware4.4 or later
- supermicro x11pdg-ot_firmware4.4 or later
- supermicro x11pdg-sn_firmware4.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| supermicro x11dpg-hgx2_firmware | v < 4.4 | 4.4 |
| supermicro x11pdg-qt_firmware | v < 4.4 | 4.4 |
| supermicro x11pdg-ot_firmware | v < 4.4 | 4.4 |
| supermicro x11pdg-sn_firmware | v < 4.4 | 4.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.