CVE-2019-16650: Critical severity supermicro x11dai-n firmware vulnerability
Published Sep 21, 2019
·Updated
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the server managed by the BMC.
Affected Software
527 affected components
Supermicro X11dai-n Firmware=1.71.5
Supermicro X11dai-n
Supermicro X11dac Firmware=1.71.5
Supermicro X11dac
Supermicro X11dph-tq Firmware=1.71.5
Supermicro X11DPH-Tq
Supermicro X11dph-i Firmware=1.71.5
Supermicro X11dph-i
Supermicro X11dph-t Firmware=1.71.5
Supermicro X11dph-t
Supermicro X11dps-re Firmware=1.71.5
Supermicro X11dps-re
Supermicro X11dsf-e Firmware=1.71.5
Supermicro X11dsf-e
Supermicro X11dsn-ts Firmware=1.71.5
Supermicro X11dsn-ts
Supermicro X11dsn-tsq Firmware=1.71.5
Supermicro X11dsn-tsq
Supermicro X11dsc\+ Firmware=1.74
Supermicro X11dsc\+
Supermicro X11ddw-nt Firmware=1.71.5
Supermicro X11ddw-nt
Supermicro X11ddw-l Firmware=1.71.5
Supermicro X11ddw-l
Supermicro X11dgq Firmware=1.71.5
Supermicro X11dgq
Supermicro X11dpff-sn Firmware=1.71.5
Supermicro X11dpff-sn
Supermicro X11dpfr-sn Firmware=1.71.5
Supermicro X11dpfr-sn
Supermicro X11dpfr-s Firmware=1.71.5
Supermicro X11dpfr-s
Supermicro X11dpt-ps Firmware=1.71.5
Supermicro X11dpt-ps
Supermicro X11dpt-b Firmware=1.71.5
Supermicro X11dpt-b
Supermicro X11dpt-bh Firmware=1.71.5
Supermicro X11dpt-bh
Supermicro X11dpt-l Firmware=3.74
Supermicro X11dpt-l
Supermicro X11dpu Firmware=1.71.5
Supermicro X11dpu
Supermicro X11dpu-v Firmware=1.71.5
Supermicro X11dpu-v
Supermicro X11dpu-x Firmware=1.71.5
Supermicro X11dpu-x
Supermicro X11dpu-xll Firmware=1.71.5
Supermicro X11dpu-xll
Supermicro X11dpu-z\+ Firmware=1.71.5
Supermicro X11dpu-z\+
Supermicro X11dpu-ze\+ Firmware=1.71.5
Supermicro X11dpu-ze\+
Supermicro X11dpg-sn Firmware=1.71.5
Supermicro X11dpg-sn
Supermicro X11dpg-qt Firmware=1.71.5
Supermicro X11dpg-qt
Supermicro X11dpg-ot-cpu Firmware=1.71.5
Supermicro X11dpg-ot-cpu
Supermicro X11dpi-nt Firmware=1.71.5
Supermicro X11dpi-nt
Supermicro X11dpi-n Firmware=1.71.5
Supermicro X11dpi-n
Supermicro X11dpl-i Firmware=1.71.5
Supermicro X11dpl-i
Supermicro X11dpx-t Firmware=1.71.5
Supermicro X11dpx-t
Supermicro X11dgo-t Firmware=1.71.5
Supermicro X11dgo-t
Supermicro X11sca Firmware=1.71.5
Supermicro X11sca
Supermicro X11sca-f Firmware=1.71.5
Supermicro X11sca-f
Supermicro X11sch-f Firmware=1.23.2
Supermicro X11sch-f
Supermicro X11sch-ln4f Firmware=1.23.2
Supermicro X11sch-ln4f
Supermicro X11sca-w Firmware=1.71.5
Supermicro X11sca-w
Supermicro X11scl-f Firmware=1.23.2
Supermicro X11scl-f
Supermicro X11scl-ln4f Firmware=1.23.2
Supermicro X11scl-ln4f
Supermicro X11scl-if Firmware=1.23.2
Supermicro X11scl-if
Supermicro X11scm-f Firmware=1.23.2
Supermicro X11scm-f
Supermicro X11scm-ln8f Firmware=1.23.2
Supermicro X11scm-ln8f
Supermicro X11scw-f Firmware=3.75.00
Supermicro X11scw-f
Supermicro X11spa-t Firmware=1.71.5
Supermicro X11spa-t
Supermicro X11spa-tf Firmware=1.71.5
Supermicro X11spa-tf
Supermicro X11spi-tf Firmware=1.71.6
Supermicro X11spi-tf
Supermicro X11spl-f Firmware=1.71.6
Supermicro X11spl-f
Supermicro X11spm-f Firmware=1.71.6
Supermicro X11spm-f
Supermicro X11spm-tf Firmware=1.71.6
Supermicro X11spm-tf
Supermicro X11spm-tpf Firmware=1.71.6
Supermicro X11spm-tpf
Supermicro X11sph-nctf Firmware=1.71.6
Supermicro X11sph-nctf
Supermicro X11sph-nctpf Firmware=1.71.6
Supermicro X11sph-nctpf
Supermicro X11spw-tf Firmware=1.71.6
Supermicro X11spw-tf
Supermicro X11spw-ctf Firmware=1.71.6
Supermicro X11spw-ctf
Supermicro X11spg-tf Firmware=1.71.6
Supermicro X11spg-tf
Supermicro X11sri-if Firmware=3.75.00
Supermicro X11sri-if
Supermicro X11srl-f Firmware=3.74.2
Supermicro X11srl-f
Supermicro X11srm-f Firmware=1.31.1
Supermicro X11srm-f
Supermicro X11srm-vf Firmware=1.31.1
Supermicro X11srm-vf
Supermicro X11ssl-f Firmware=1.56
Supermicro X11ssl-f
Supermicro X11ssm-f Firmware=1.56
Supermicro X11SSM-F
Supermicro X11ssl Firmware=1.56
Supermicro X11SSL
Supermicro X11ssm Firmware=1.56
Supermicro X11ssm
Supermicro X11ssh-f Firmware=1.56
Supermicro X11ssh-f
Supermicro X11ssh-ln4f Firmware=1.56
Supermicro X11ssh-ln4f
Supermicro X11ssw-4tf Firmware=1.56
Supermicro X11ssw-4tf
Supermicro X11ssw-tf Firmware=1.56
Supermicro X11ssw-tf
Supermicro X11ssw-f Firmware=1.71.5
Supermicro X11ssw-f
Supermicro X11ssi-ln4f Firmware=1.71.5
Supermicro X11ssi-ln4f
Supermicro X11ssw-f Firmware=3.85.00
Supermicro X11ssh-tf Firmware=1.56
Supermicro X11ssh-tf
Supermicro X11ssh-ctf Firmware=1.56
Supermicro X11ssh-ctf
Supermicro X11ssl-cf Firmware=1.56
Supermicro X11SSL-CF
Supermicro X11ssl-nf Firmware=1.56
Supermicro X11ssl-nf
Supermicro X11ssh-gf-1585 Firmware=1.56
Supermicro X11ssh-gf-1585
Supermicro X11ssh-gf-1585l Firmware=1.56
Supermicro X11ssh-gf-1585l
Supermicro X11ssh-gtf-1585 Firmware=1.56
Supermicro X11ssh-gtf-1585
Supermicro X11ssh-gtf-1585l Firmware=1.56
Supermicro X11ssh-gtf-1585l
Supermicro B11dpt Firmware=3.68
Supermicro B11dpt
Supermicro B11dpe Firmware=3.68
Supermicro B11dpe
Supermicro B11spe-cpu-tf Firmware=3.68
Supermicro B11spe-cpu-tf
Supermicro B11spe-cpu-25g Firmware=3.68
Supermicro B11spe-cpu-25g
Supermicro B11qpi Firmware=3.68
Supermicro B11qpi
Supermicro X11ssd-f Firmware=3.68
Supermicro X11ssd-f
Supermicro X11sse-f Firmware=3.68
Supermicro X11SSE-F
Supermicro B2ss1-cpu Firmware=3.68
Supermicro B2ss1-cpu
Supermicro B2ss1-cf Firmware=3.68
Supermicro B2ss1-cf
Supermicro B2ss1-f Firmware=3.68
Supermicro B2ss1-f
Supermicro B2ss2-f Firmware=3.68
Supermicro B2ss2-f
Supermicro B2ss1-mtf Firmware=3.68
Supermicro B2ss1-mtf
Supermicro B2ss1-h-mtf Firmware=3.68
Supermicro B2ss1-h-mtf
Supermicro B2ss2-mtf Firmware=3.68
Supermicro B2ss2-mtf
Supermicro B2ss2-h-mtf Firmware=3.68
Supermicro B2ss2-h-mtf
Supermicro X11scd-f Firmware=3.68
Supermicro X11scd-f
Supermicro X11sdd-8c-f Firmware=3.68
Supermicro X11sdd-8c-f
Supermicro X11sdd-18c-f Firmware=3.68
Supermicro X11sdd-18c-f
Supermicro X11qph\+ Firmware=1.71.5
Supermicro X11qph\+
Supermicro X11opi-cpu Firmware=1.71.5
Supermicro X11opi-cpu
Supermicro X11sds-8c Firmware=3.74.2
Supermicro X11sds-8c
Supermicro X11sds-12c Firmware=3.74.2
Supermicro X11sds-12c
Supermicro X11sds-16c Firmware=3.74.2
Supermicro X11sds-16c
Supermicro X10ddw-i Firmware=3.83
Supermicro X10ddw-i
Supermicro X10ddw-in Firmware=3.83
Supermicro X10ddw-in
Supermicro X10drs Firmware=3.83
Supermicro X10drs
Supermicro X10drd-i Firmware=3.83
Supermicro X10drd-i
Supermicro X10drd-it Firmware=3.83
Supermicro X10drd-it
Supermicro X10drd-int Firmware=3.83
Supermicro X10drd-int
Supermicro X10drd-intp Firmware=3.83
Supermicro X10drd-intp
Supermicro X10drd-itp Firmware=3.83
Supermicro X10drd-itp
Supermicro X10drd-l Firmware=3.83
Supermicro X10drd-l
Supermicro X10drd-lt Firmware=3.83
Supermicro X10drd-lt
Supermicro X10drd-ltp Firmware=3.83
Supermicro X10drd-ltp
Supermicro X10drx Firmware=3.83
Supermicro X10drx
Supermicro X10drh-c Firmware=3.83
Supermicro X10drh-c
Supermicro X10drh-ct Firmware=3.83
Supermicro X10drh-ct
Supermicro X10drh-cln4 Firmware=3.83
Supermicro X10drh-cln4
Supermicro X10drh-i Firmware=3.83
Supermicro X10drh-i
Supermicro X10drh-it Firmware=3.83
Supermicro X10DRH-iT
Supermicro X10drh-iln4 Firmware=3.83
Supermicro X10drh-iln4
Supermicro X10dri Firmware=3.83
Supermicro X10dri
Supermicro X10dri-t Firmware=3.83
Supermicro X10dri-t
Supermicro X10drc-ln4\+ Firmware=3.83
Supermicro X10drc-ln4\+
Supermicro X10drc-t4\+ Firmware=3.83
Supermicro X10drc-t4\+
Supermicro X10dri-ln4\+ Firmware=3.83
Supermicro X10dri-ln4\+
Supermicro X10dri-t4\+ Firmware=3.83
Supermicro X10dri-t4\+
Supermicro X10drl-ln4 Firmware=3.83
Supermicro X10drl-ln4
Supermicro X10drl-i Firmware=3.83
Supermicro X10drl-i
Supermicro X10drl-it Firmware=3.83
Supermicro X10drl-it
Supermicro X10drl-c Firmware=3.83
Supermicro X10drl-c
Supermicro X10drl-ct Firmware=3.83
Supermicro X10drl-ct
Supermicro X10drt-l Firmware=3.83
Supermicro X10drt-l
Supermicro X10drt-libq Firmware=3.83
Supermicro X10drt-libq
Supermicro X10drt-libf Firmware=3.83
Supermicro X10drt-libf
Supermicro X10drt-b\+ Firmware=3.83
Supermicro X10drt-b\+
Supermicro X10drt-h Firmware=3.83
Supermicro X10drt-h
Supermicro X10drt-hibf Firmware=3.83
Supermicro X10drt-hibf
Supermicro X10drt-ps Firmware=3.83
Supermicro X10drt-ps
Supermicro X10drt-p Firmware=3.83
Supermicro X10drt-p
Supermicro X10drt-pt Firmware=3.83
Supermicro X10drt-pt
Supermicro X10drt-pibq Firmware=3.83
Supermicro X10drt-pibq
Supermicro X10drt-pibf Firmware=3.83
Supermicro X10drt-pibf
Supermicro X10drfr-n Firmware=3.83
Supermicro X10drfr-n
Supermicro X10drfr-nt Firmware=3.83
Supermicro X10drfr-nt
Supermicro X10drfr Firmware=3.83
Supermicro X10drfr
Supermicro X10drfr-t Firmware=3.83
Supermicro X10drfr-t
Supermicro X10drff-cg Firmware=3.83
Supermicro X10drff-cg
Supermicro X10drff-ctg Firmware=3.83
Supermicro X10drff-ctg
Supermicro X10drff-ig Firmware=3.83
Supermicro X10drff-ig
Supermicro X10drff-itg Firmware=3.83
Supermicro X10drff-itg
Supermicro X10drff Firmware=3.83
Supermicro X10drff
Supermicro X10drff-c Firmware=3.83
Supermicro X10drff-c
Supermicro X10drw-n Firmware=3.83
Supermicro X10drw-n
Supermicro X10drw-nt Firmware=3.83
Supermicro X10drw-nt
Supermicro X10drw-e Firmware=3.83
Supermicro X10drw-e
Supermicro X10drw-et Firmware=3.83
Supermicro X10drw-et
Supermicro X10drw-i Firmware=3.83
Supermicro X10drw-i
Supermicro X10drw-it Firmware=3.83
Supermicro X10drw-it
Supermicro X10dsn-ts Firmware=3.83
Supermicro X10dsn-ts
Supermicro X10drg-ot\+-cpu Firmware=3.83
Supermicro X10drg-ot\+-cpu
Supermicro X10drg-o\+-cpu Firmware=3.83
Supermicro X10drg-o\+-cpu
Supermicro X10dgo-t Firmware=3.83
Supermicro X10dgo-t
Supermicro X10dgq Firmware=3.83
Supermicro X10dgq
Supermicro X10drg-q Firmware=3.83
Supermicro X10drg-q
Supermicro X10drg-h Firmware=3.83
Supermicro X10drg-h
Supermicro X10drg-ht Firmware=3.83
Supermicro X10drg-ht
Supermicro X10dru-i\+ Firmware=3.83
Supermicro X10dru-i\+
Supermicro X10dru-x Firmware=3.83
Supermicro X10dru-x
Supermicro X10dru-xll Firmware=3.83
Supermicro X10dru-xll
Supermicro X10dsc\+ Firmware=3.83
Supermicro X10dsc\+
Supermicro X10sra-f Firmware=3.83
Supermicro X10sra-f
Supermicro X10sra Firmware=3.83
Supermicro X10sra
Supermicro X10srd-f Firmware=3.83
Supermicro X10srd-f
Supermicro X10srm-f Firmware=3.83
Supermicro X10srm-f
Supermicro X10srm-tf Firmware=3.83
Supermicro X10srm-tf
Supermicro X10srl-f Firmware=3.83
Supermicro X10srl-f
Supermicro X10sri-f Firmware=3.83
Supermicro X10sri-f
Supermicro X10srh-cf Firmware=3.83
Supermicro X10srh-cf
Supermicro X10srh-cln4f Firmware=3.83
Supermicro X10srh-cln4f
Supermicro X10srg-f Firmware=3.83
Supermicro X10srg-f
Supermicro X10srw-f Firmware=3.83
Supermicro X10srw-f
Supermicro X10sae Firmware=3.83
Supermicro X10sae
Supermicro X10sat Firmware=3.83
Supermicro X10sat
Supermicro X10slx-f Firmware=3.83
Supermicro X10slx-f
Supermicro X10sld-f Firmware=3.83
Supermicro X10sld-f
Supermicro X10sld-hf Firmware=3.83
Supermicro X10sld-hf
Supermicro X10sle-f Firmware=3.83
Supermicro X10sle-f
Supermicro X10sle-hf Firmware=3.83
Supermicro X10sle-hf
Supermicro X10sle-df Firmware=3.83
Supermicro X10sle-df
Supermicro X10sl7-f Firmware=3.83
Supermicro X10sl7-f
Supermicro X10sla-f Firmware=3.83
Supermicro X10sla-f
Supermicro X10slh-f Firmware=3.83
Supermicro X10slh-f
Supermicro X10sll\+-f Firmware=3.83
Supermicro X10sll\+-f
Supermicro X10sll-f Firmware=3.83
Supermicro X10sll-f
Supermicro X10sll-sf Firmware=3.83
Supermicro X10sll-sf
Supermicro X10sll-s Firmware=3.83
Supermicro X10sll-s
Supermicro X10slm-f Firmware=3.83
Supermicro X10slm-f
Supermicro X10slm\+-f Firmware=3.83
Supermicro X10slm\+-f
Supermicro X10slm\+-ln4f Firmware=3.83
Supermicro X10slm\+-ln4f
Supermicro X10sde-df Firmware=3.68
Supermicro X10sde-df
Supermicro X10sdd-16c-f Firmware=3.68
Supermicro X10sdd-16c-f
Supermicro X10sdd-f Firmware=3.68
Supermicro X10sdd-f
Supermicro B1sd1-16c-tf Firmware=3.68
Supermicro B1sd1-16c-tf
Supermicro B1sd1-tf Firmware=3.68
Supermicro B1sd1-tf
Supermicro B1sd2-16c-tf Firmware=3.68
Supermicro B1sd2-16c-tf
Supermicro B1sd2-tf Firmware=3.68
Supermicro B1sd2-tf
Supermicro B10drc Firmware=3.68
Supermicro B10drc
Supermicro B10drc-n Firmware=3.68
Supermicro B10drc-n
Supermicro B10dri Firmware=3.68
Supermicro B10dri
Supermicro B10dri-n Firmware=3.68
Supermicro B10dri-n
Supermicro B10drg-ibf Firmware=3.68
Supermicro B10drg-ibf
Supermicro B10drg-ibf2 Firmware=3.68
Supermicro B10drg-ibf2
Supermicro B10drg-tp Firmware=3.68
Supermicro B10drg-tp
Supermicro B10drt Firmware=3.68
Supermicro B10drt
Supermicro B10drt-ibf Firmware=3.68
Supermicro B10drt-ibf
Supermicro B10drt-ibf2 Firmware=3.68
Supermicro B10drt-ibf2
Supermicro B10drt-tp Firmware=3.68
Supermicro B10drt-tp
Supermicro X10qrh\+ Firmware=3.80
Supermicro X10qrh\+
Supermicro X10qbl-4 Firmware=3.80
Supermicro X10qbl-4
Supermicro X10qbl-4ct Firmware=3.80
Supermicro X10qbl-4ct
Supermicro X10qbl Firmware=3.80
Supermicro X10qbl
Supermicro X10qbl-ct Firmware=3.80
Supermicro X10qbl-ct
Supermicro X10qbi Firmware=3.81
Supermicro X10qbi
Supermicro X10obi-cpu Firmware=3.83
Supermicro X10obi-cpu
Supermicro X10dbt-t Firmware=3.83
Supermicro X10dbt-t
Supermicro X10sdv-7tp8f Firmware=3.83
Supermicro X10sdv-7tp8f
Supermicro X10sdv-7tp4f Firmware=3.83
Supermicro X10sdv-7tp4f
Supermicro X10sdv-2c-7tp4f Firmware=3.83
Supermicro X10sdv-2c-7tp4f
Supermicro X10sdv-4c-7tp4f Firmware=3.83
Supermicro X10sdv-4c-7tp4f
Supermicro X10sdv-2c-tp4f Firmware=3.83
Supermicro X10sdv-2c-tp4f
Supermicro X10sdv-4c\+-tp4f Firmware=3.83
Supermicro X10sdv-4c\+-tp4f
Supermicro X10sdv-2c-tp8f Firmware=3.83
Supermicro X10sdv-2c-tp8f
Supermicro X10sdv-tp8f Firmware=3.83
Supermicro X10sdv-tp8f
Supermicro X10sdv-f Firmware=3.83
Supermicro X10sdv-f
Supermicro X10sdv-tln4f Firmware=3.83
Supermicro X10sdv-tln4f
Supermicro X10sdv-8c-tln4f Firmware=3.83
Supermicro X10sdv-8c-tln4f
Supermicro X10sdv-6c-tln4f Firmware=3.83
Supermicro X10sdv-6c-tln4f
Supermicro X10sdv-2c-tln2f Firmware=3.83
Supermicro X10sdv-2c-tln2f
Supermicro X10sdv-4c-tln2f Firmware=3.83
Supermicro X10sdv-4c-tln2f
Supermicro X10sdv-4c-tln4f Firmware=3.83
Supermicro X10sdv-4c-tln4f
Supermicro X10sdv-4c\+-tln4f Firmware=3.83
Supermicro X10sdv-4c\+-tln4f
Supermicro X10sdv-6c\+-tln4f Firmware=3.83
Supermicro X10sdv-6c\+-tln4f
Supermicro X10sdv-8c-tln4f\+ Firmware=3.83
Supermicro X10sdv-8c-tln4f\+
Supermicro X10sdv-8c\+-ln2f Firmware=3.83
Supermicro X10sdv-8c\+-ln2f
Supermicro X10sdv-12c-tln4f Firmware=3.83
Supermicro X10sdv-12c-tln4f
Supermicro X10sdv-12c-tln4f\+ Firmware=3.83
Supermicro X10sdv-12c-tln4f\+
Supermicro X10sdv-12c\+-tln4f Firmware=3.83
Supermicro X10sdv-12c\+-tln4f
Supermicro X10sdv-16c\+-tln4f Firmware=3.83
Supermicro X10sdv-16c\+-tln4f
Supermicro X10sdv-16c-tln4f\+ Firmware=3.83
Supermicro X10sdv-16c-tln4f\+
Supermicro X10sdv-16c-tln4f Firmware=3.83
Supermicro X10sdv-16c-tln4f
Supermicro A1srm-ln7f-2358 Firmware=3.83
Supermicro A1srm-ln7f-2358
Supermicro A1srm-ln7f-2758 Firmware=3.83
Supermicro A1srm-ln7f-2758
Supermicro A1srm-ln5f-2358 Firmware=3.83
Supermicro A1srm-ln5f-2358
Supermicro A1sa2-2750f Firmware=3.83
Supermicro A1sa2-2750f
Supermicro A1sam-2750f Firmware=3.83
Supermicro A1sam-2750f
Supermicro A1sam-2550f Firmware=3.83
Supermicro A1sam-2550f
Supermicro A1srm-2758f Firmware=3.83
Supermicro A1srm-2758f
Supermicro A1srm-2558f Firmware=3.83
Supermicro A1srm-2558f
Supermicro A1sai-2750f Firmware=3.83
Supermicro A1sai-2750f
Supermicro A1sai-2550f Firmware=3.83
Supermicro A1sai-2550f
Supermicro A1sri-2758f Firmware=3.83
Supermicro A1sri-2758f
Supermicro A1sri-2558f Firmware=3.83
Supermicro A1sri-2558f
Supermicro A1sri-2358f Firmware=3.83
Supermicro A1sri-2358f
Event History
Sep 21, 2019
CVE Published
via MITRE·01:54 AM
Data Sourced
via MITRE·01:54 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-16650?
The severity of CVE-2019-16650 is considered to be critical due to the potential for unauthorized access to privileged resources.
2
How do I fix CVE-2019-16650?
To fix CVE-2019-16650, update to the latest firmware version provided by Supermicro that addresses the vulnerability.
3
What systems are affected by CVE-2019-16650?
CVE-2019-16650 affects Supermicro X10 and X11 products utilizing specific firmware versions, particularly version 1.71.5.
4
How can CVE-2019-16650 be exploited?
CVE-2019-16650 can be exploited by an attacker who connects to the virtual media service and takes control of connected USB devices through privilege escalation.
5
What is the impact of CVE-2019-16650?
The impact of CVE-2019-16650 includes the potential for unauthorized access or manipulation of devices connected to the vulnerable BMC's virtual media service.