CVE-2026-18450
Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The affected software is the firmware of Supermicro Baseboard Management Controllers (BMCs), which manage server hardware remotely through IPMI. An attacker who can reach an active IPMI session could potentially send specially crafted packets to run arbitrary commands on the BMC, bypassing the integrity and encryption protections that should apply.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Affected versions
- SMCI X12SPI
01.07.20