Arbitrary Memory Write Vulnerability Affects Supermicro Motherboards
CVE-2024-36433

7.5HIGH

Key Information:

Vendor

Supermicro

Status
X11DPH-T Motherboard
Vendor
CVE Published:
15 July 2024

What is CVE-2024-36433?

A vulnerability has been identified in certain Supermicro motherboards that allows for arbitrary memory writes due to inadequate protections in the BIOS firmware versions prior to 4.4. This weakness may lead to unauthorized modification of memory contents, potentially compromising the system's integrity and security. Users utilizing the affected models should seek guidance on updating their firmware to mitigate risks associated with this vulnerability.

References

https://www.supermicro.com/en/support/security_center#%21...
https://www.supermicro.com/en/support/security_BIOS_Jul_2024

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

.