CVE-2025-7937

Published Sep 19, 2025

Last updated 20 hours ago

Supermicro BMC

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-7937 is a security vulnerability in the Supermicro Baseboard Management Controller (BMC) firmware, specifically affecting Supermicro MBD-X12STW. The vulnerability lies in the BMC firmware validation logic, where a crafted firmware image can bypass the verification process. This allows an attacker to update the system firmware with a malicious image. Successful exploitation of CVE-2025-7937 could allow attackers to gain persistent control of the BMC system and the main server OS. This vulnerability is a bypass for CVE-2024-10237 and involves manipulating the 'fwmap' table by adding custom entries and relocating the original signed content to unreserved firmware space.

Description: There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image.
Source: def9a96e-e099-41a9-bfac-30fd4f82c411
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.2
Impact score: 5.9
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

def9a96e-e099-41a9-bfac-30fd4f82c411: CWE-347

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

References