Stack Overflow Vulnerability in Supermicro MBD-X12DPG-OA6 Firmware

CVE-2024-10239

What is CVE-2024-10239?

A security vulnerability exists in the firmware of Supermicro's MBD-X12DPG-OA6 due to improper handling of image verification. An attacker with administrator privileges could exploit this issue by uploading a specially crafted firmware image. This action may trigger a stack overflow due to the unchecked fat->fsd.max_fld variable, potentially compromising the system's integrity and allowing for unauthorized actions. It is crucial for administrators to apply necessary patches and review their security practices to mitigate the risks associated with this vulnerability.

References