SMTP Service Vulnerability in Supermicro BMC Products by Supermicro

CVE-2026-3820

What is CVE-2026-3820?

A security vulnerability exists in the SMTP service of Supermicro's BMC for the AS-2115HS-TNR product. This flaw allows an attacker to gain administrator privileges by injecting maliciously crafted characters into the SMTP service configuration. Such unauthorized access can lead to execution of unintended commands within the underlying system, resulting in potential denial-of-service attacks, arbitrary code execution, or even complete compromise of the controller. Users are strongly advised to apply security patches and review their configurations to mitigate these risks.

References