CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2024-36432
https://notcve.org/view.php?id=CVE-2024-36432
15 Jul 2024 — An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with BIOS firmware before 4.4. Se descubrió una vulnerabilidad de escritura en memoria arbitraria en las placas base Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT y X11PDG-SN con firmware BIOS anterior a 4.4. • https://www.supermicro.com/en/support/security_center#%21advisories • CWE-1246: Improper Write Handling in Limited-write Non-Volatile Memories •
CVSS: 9.8EPSS: 0%CPEs: 355EXPL: 0CVE-2024-36435
https://notcve.org/view.php?id=CVE-2024-36435
11 Jul 2024 — An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules). An unauthenticated user can post crafted data to the interface that triggers a stack buffer overflow, and may lead to arbitrary remote code execution on a BMC. Se descubrió un problema en el firmware Supermicro BMC en placas base seleccionadas X11, X12, H12, B12, X13, H13 y B13 (y módulos CMM6). Un usuario no autenticado puede publicar datos manipulados en la interfaz, lo que d... • https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Jul_2024 • CWE-121: Stack-based Buffer Overflow •