Vulnerability in Supermicro A1sa2-2750f
CVE-2019-16650
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the server managed by the BMC.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.022 (81.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 81.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.022 · newest: 0.022 · change: 0.000
Affected products
- Supermicro A1sa2-2750f
- Supermicro A1sa2-2750f Firmware — versions 3.83
- Supermicro A1sai-2550f
- Supermicro A1sai-2550f Firmware — versions 3.83
- Supermicro A1sai-2750f
- Supermicro A1sai-2750f Firmware — versions 3.83
- Supermicro A1sam-2550f
- Supermicro A1sam-2550f Firmware — versions 3.83
- Supermicro A1sam-2750f
- Supermicro A1sam-2750f Firmware — versions 3.83
References
- eclypsium.com/2019/09/03/usbanywhere-bmc-vulnerability-opens-servers-to-remote-… (Third Party Advisory, Mitigation)
- github.com/eclypsium/USBAnywhere (Third Party Advisory)
- www.supermicro.com/support/security_BMC_virtual_media.cfm (Vendor Advisory)
Frequently asked questions
- What is CVE-2019-16650?
- CVE-2019-16650 is a critical-severity vulnerability in Supermicro A1sa2-2750f. CVSS score: 10.0/10. Published 2019-09-21.
- How severe is CVE-2019-16650?
- Critical severity. CVSS v3 base score is 10.0 out of 10.