CVE-2026-18450: Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The issue is rated network-accessible with low attack complexity and requires no privileges or user interaction. Exploitation involves crafting IPMI packets for an active RMCP+ session.
What is the potential impact if exploitation succeeds?
An attacker may be able to execute arbitrary commands on the BMC through an active session. The severity vector indicates high impact to confidentiality, integrity, and availability.
What systems should be prioritized for investigation?
Prioritize Supermicro BMC deployments where IPMI/RMCP+ is reachable over the network, especially systems with active RMCP+ sessions. The provided information does not identify affected versions or configurations.