Stack Overflow Vulnerability in Supermicro MBD-X12DPG-OA6 Firmware

CVE-2024-10239

What is CVE-2024-10239?

A security vulnerability exists in the firmware of Supermicro's MBD-X12DPG-OA6 due to improper handling of image verification. An attacker with administrator privileges could exploit this issue by uploading a specially crafted firmware image. This action may trigger a stack overflow due to the unchecked fat->fsd.max_fld variable, potentially compromising the system's integrity and allowing for unauthorized actions. It is crucial for administrators to apply necessary patches and review their security practices to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References