Alexander Tereshkin

**Name of the Vulnerable Software and Affected Versions** Supermicro BMC firmware versions (affected versions not specified) **Description** The Baseboard Management Controller (BMC) firmware has a flaw in its firmware image authentication design. An attacker can modify the firmware to bypass BMC inspection and the signature verification process. This allows for unauthorized modifications to the BMC firmware. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Supermicro MBD-X12DPG-OA6 (affected versions not specified) **Description** A security issue exists in the firmware image verification implementation. An attacker with administrator privileges can upload a specially crafted image, causing a stack overflow due to the unchecked `fat->fsd.max fld`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Supermicro MBD-X12DPG-OA6 (affected versions not specified) **Description** A security issue exists in the firmware image verification implementation, allowing an attacker to upload a specially crafted image that causes a stack overflow. This is due to the failure to check `fld->used bytes`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules) (affected versions not specified) Description: An issue was discovered in the Supermicro BMC firmware that allows an unauthenticated user to post crafted data to the interface, triggering a stack buffer overflow and potentially leading to arbitrary remote code execution on a BMC. The vulnerability is related to the `GetValue` function in the web interface of BMC IPMI servers. Exploitation of the vulnerability may allow an attacker to execute arbitrary code using a specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and Dell Precision 7920 Rack Workstation BIOS (affected versions not specified) **Description** The issue is a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS (affected versions not specified) **Description** A stack-based buffer overflow vulnerability exists in systems with NVDIMM-N installed, which can be exploited by a local malicious user with high privileges. This could lead to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge Server BIOS versions (affected versions not specified) **Description** A heap-based buffer overflow issue exists in systems with NVDIMM-N installed, potentially allowing a local malicious user with high privileges to exploit the issue. This could lead to a denial of service, arbitrary code execution, or information disclosure in the UEFI or BIOS Preboot Environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.