Supermicro BMC Shared Library Stack Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in the Supermicro BMC Shared library. This vulnerability allows an authenticated attacker with access to the BMC to overflow a 128-byte stack buffer by sending a crafted Content-Type HTTP header. Exploitation of this vulnerability could lead to arbitrary code execution within the BMC's firmware operating system.

Impact

Exploitation of this vulnerability could result in unauthorized arbitrary code execution on the BMC's firmware operating system.

Remediation

Affected Supermicro motherboard SKUs will require a BMC update to mitigate this vulnerability. An updated BMC firmware has been created and is currently being tested and validated. Please check the Supermicro Release Notes for the resolution.