CVE-2018-13787: High severity supermicro x11ssz-f firmware vulnerability
Published Jul 9, 2018
·Updated
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
Affected Software
216 affected components
Supermicro X11ssz Firmware
Supermicro X11ssz
Supermicro X11ssv Firmware
Supermicro X11ssv
Supermicro X11ssql Firmware
Supermicro X11ssql
Supermicro X11ssq Firmware
Supermicro X11ssq
Supermicro X11ssn Firmware
Supermicro X11ssn
Supermicro X11srm Firmware
Supermicro X11srm
Supermicro X11sra Firmware
Supermicro X11sra
Supermicro X11sba Firmware
Supermicro X11sba
Supermicro X11sat Firmware
Supermicro X11sat
Supermicro X11sae M Firmware
Supermicro X11sae M
Supermicro X11sae Firmware
Supermicro X11sae
Supermicro X10srw Firmware
Supermicro X10srw
Supermicro X10srm Firmware
Supermicro X10srm
Supermicro X10srl Firmware
Supermicro X10srl
Supermicro X10sri Firmware
Supermicro X10sri
Supermicro X10srh Firmware
Supermicro X10srh
Supermicro X10srg Firmware
Supermicro X10srg
Supermicro X10srd Firmware
Supermicro X10srd
Supermicro X10sra Firmware
Supermicro X10sra
Supermicro X10sdvt Firmware
Supermicro X10sdvt
Supermicro X10sdvf Firmware
Supermicro X10sdvf
Supermicro X10sde Firmware
Supermicro X10sde
Supermicro X10sddf Firmware
Supermicro X10sddf
Supermicro X10sba Firmware
Supermicro X10sba
Supermicro X10qrh Firmware
Supermicro X10qrh
Supermicro X10dsn Firmware
Supermicro X10dsn
Supermicro X10dscp Firmware
Supermicro X10dscp
Supermicro X10dsc Firmware
Supermicro X10dsc
Supermicro X10drx Firmware
Supermicro X10drx
Supermicro X10drwn Firmware
Supermicro X10drwn
Supermicro X10drw Firmware
Supermicro X10drw
Supermicro X10drux Firmware
Supermicro X10drux
Supermicro X10drul Firmware
Supermicro X10drul
Supermicro X10dru Firmware
Supermicro X10dru
Supermicro X10drts Firmware
Supermicro X10drts
Supermicro X10drtps Firmware
Supermicro X10drtps
Supermicro X10drtl Firmware
Supermicro X10drtl
Supermicro X10drth Firmware
Supermicro X10drth
Supermicro X10drtb Firmware
Supermicro X10drtb
Supermicro X10drt Firmware
Supermicro X10drt
Supermicro X10drs Firmware
Supermicro X10drs
Supermicro X10drln Firmware
Supermicro X10drln
Supermicro X10drlc Firmware
Supermicro X10drlc
Supermicro X10drl Firmware
Supermicro X10drl
Supermicro X10dri1 Firmware
Supermicro X10dri1
Supermicro X10drh4 Firmware
Supermicro X10drh4
Supermicro X10drh Firmware
Supermicro X10drh
Supermicro X10drgh Firmware
Supermicro X10drgh
Supermicro X10drg Firmware
Supermicro X10drg
Supermicro X10drfg Firmware
Supermicro X10drfg
Supermicro X10drff Firmware
Supermicro X10drff
Supermicro X10drdl Firmware
Supermicro X10drdl
Supermicro X10drd Firmware
Supermicro X10drd
Supermicro X10drc Firmware
Supermicro X10drc
Supermicro X10dgo Firmware
Supermicro X10dgo
Supermicro X10ddwn Firmware
Supermicro X10ddwn
Supermicro X10ddwi Firmware
Supermicro X10ddwi
Supermicro X10ddw4 Firmware
Supermicro X10ddw4
Supermicro X10ddw3 Firmware
Supermicro X10ddw3
Supermicro X10dax Firmware
Supermicro X10dax
Supermicro X10dali Firmware
Supermicro X10dali
Supermicro X10dal Firmware
Supermicro X10dal
Supermicro X10dai Firmware
Supermicro X10dai
Supermicro B10drt Firmware
Supermicro B10drt
Supermicro B10dri Firmware
Supermicro B10dri
Supermicro B10drg Firmware
Supermicro B10drg
Supermicro X9sae Firmware
Supermicro X9sae
Supermicro X9drth Firmware
Supermicro X9drth
Supermicro X9drgqf Firmware
Supermicro X9drgqf
Supermicro X9drffp Firmware
Supermicro X9drffp
Supermicro X9drf Firmware
Supermicro X9drf
Supermicro X9dbl Firmware
Supermicro X9dbl
Supermicro X8siu Firmware
Supermicro X8siu
Supermicro X8sit Firmware
Supermicro X8sit
Supermicro X8sil Firmware
Supermicro X8sil
Supermicro X8sie Firmware
Supermicro X8sie
Supermicro X8sia Firmware
Supermicro X8sia
Supermicro K1spi Firmware
Supermicro K1spi
Supermicro K1spes Firmware
Supermicro K1spes
Supermicro C9x299 Firmware
Supermicro C9X299
Supermicro C7z97oc Firmware
Supermicro C7z97oc
Supermicro C7z97mf Firmware
Supermicro C7z97mf
Supermicro C7z87oc Firmware
Supermicro C7z87oc
Supermicro C7z370l Firmware
Supermicro C7z370l
Supermicro C7z370i Firmware
Supermicro C7z370i
Supermicro C7z270p Firmware
Supermicro C7z270p
Supermicro C7z270m Firmware
Supermicro C7z270m
Supermicro C7z270l Firmware
Supermicro C7z270l
Supermicro C7z270cg Firmware
Supermicro C7z270cg
Supermicro C7z270c Firmware
Supermicro C7z270c
Supermicro C7z170oce Firmware
Supermicro C7z170oce
Supermicro C7z170o Firmware
Supermicro C7z170o
Supermicro C7z170 Firmware
Supermicro C7z170
Supermicro C7x99oc Firmware
Supermicro C7x99oc
Supermicro C7q270 Firmware
Supermicro C7q270
Supermicro C7h270 Firmware
Supermicro C7h270
Supermicro C7b250 Firmware
Supermicro C7b250
Supermicro B1sd2tf Firmware
Supermicro B1sd2tf
Supermicro B1sa4 Firmware
Supermicro B1sa4
Supermicro B1dri Firmware
Supermicro B1dri
Supermicro A2sav Firmware
Supermicro A2sav
Supermicro A2sap Firmware
Supermicro A2sap
Supermicro A2san Firmware
Supermicro A2san
Supermicro A1srm Firmware
Supermicro A1srm
Supermicro A1sam Firmware
Supermicro A1sam
Supermicro A1sai1 Firmware
Supermicro A1sai1
Supermicro A1sai Firmware
Supermicro A1sai
Supermicro A1sa Firmware
Supermicro A1sa
Event History
Jul 9, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-13787?
CVE-2018-13787 is classified as a high-severity vulnerability due to its potential exploitation for unauthorized firmware modification.
2
How do I fix CVE-2018-13787?
To mitigate CVE-2018-13787, update the firmware of affected Supermicro products to the latest version provided by Supermicro.
3
Which products are affected by CVE-2018-13787?
CVE-2018-13787 affects certain Supermicro X11, X10, X9, X8, K1SP, C9X299, C7, B1, A2, and A1 products.
4
What type of vulnerability is CVE-2018-13787?
CVE-2018-13787 is a firmware vulnerability that allows OS programs to modify the firmware due to a misconfigured Descriptor Region.
5
Can CVE-2018-13787 be exploited remotely?
Yes, CVE-2018-13787 has the potential for remote exploitation if an attacker has access to the affected system.