Firmware Validation Flaw in Supermicro Motherboard BMC
CVE-2025-6198

6.4MEDIUM

Key Information:

Vendor

Smci

Status
X13sem-f
Vendor
CVE Published:
19 September 2025

What is CVE-2025-6198?

A security vulnerability exists in the firmware validation logic of the Supermicro MBD-X13SEM-F motherboard. An attacker could exploit this flaw to update the system firmware by uploading a specially crafted image, potentially compromising system integrity and security. Organizations using this hardware should be aware of the risks associated with this vulnerability and take necessary measures to secure their systems.

Affected Version(s)

X13SEM-F BMC 01.03.47

References

https://www.supermicro.com/en/support/security_BMC_IPMI_S...

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Binarly Inc.
.
CVE-2025-6198 : Firmware Validation Flaw in Supermicro Motherboard BMC