Stack Overflow Vulnerability in Supermicro Firmware

CVE-2024-10238

What is CVE-2024-10238?

The vulnerability involves a flaw in the firmware image verification process of the Supermicro MBD-X12DPG-OA6. An attacker can exploit this weakness by uploading a specially crafted firmware image that does not correctly validate the image size, leading to a stack overflow. This could potentially allow unauthorized access or control over the device, creating significant security risks.

References