CVE-2026-65219: Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running a Supermicro BMC with the affected RAKP+ implementation are exposed if an attacker can reach the BMC's RMCP+ service over the network. No authentication or user interaction is required according to the supplied severity vector.
What does an attacker need to do to exploit it?
An attacker needs to send a request followed by a specially crafted RAKP message to establish an RMCP+ session. The resulting session could be used to execute commands.
Does successful exploitation affect confidentiality, integrity, or availability?
The supplied severity vector indicates high confidentiality and integrity impact, with no availability impact. This is consistent with an unauthorized session being usable for command execution.