Supermicro BMC Firmware Validation Vulnerability on MBD-X12STW Allowing Unauthorized Firmware Updates

A vulnerability exists in the Supermicro BMC firmware validation logic on the MBD-X12STW motherboard. This issue allows an attacker to bypass the firmware verification process and update the system firmware with a specially crafted image. The manipulated image can redirect the firmware update process to a fake table in the unsigned region, exploiting the improper verification of cryptographic signatures.

Impact

Exploitation of this vulnerability could lead to unauthorized firmware updates, potentially allowing for malicious modifications to the system's firmware.

Remediation

Affected Supermicro motherboard SKUs will require a BMC update to address this vulnerability. An updated BMC firmware is being tested and validated by Supermicro. Please check the Release notes for the resolution.