CVE-2026-65219high7.4
Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
Impact
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.
Source excerpt · SupermicroAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
SMCI · MBD-X12SPI
Platforms: BMC
Other versions: affected
| Version / range | Source status |
|---|---|
| 1.07.20 | affected |
Original source description
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.