Back to Database
Status published
Critical
CVE-2019-16650
On Supermicro X10 and X11 products, a client's access privileges...
Vulnerability Description
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the server managed by the BMC.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16650
Credits & Attribution
No credits recorded in the NVD database.
References
More from supermicro
View All →CVE-2022-43309
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered...
Unknown
0
CVE-2020-15046
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a...
High
8.8
CVE-2019-19642
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS...
High
8.8
CVE-2019-16649
On Supermicro H11, H12, M11, X9, X10, and X11 products,...
Critical
10
CVE-2019-13131
Super Micro SuperDoctor 5, when restrictions are not implemented in...
Critical
9.8
Affected Vendor
supermicro
View all reports →Affected Software
x11dai-n firmware, x11dac firmware, x11dph-tq firmware, x11dph-i firmware, x11dph-t firmware, x11dps-re firmware, x11dsf-e firmware, x11dsn-ts firmware, x11dsn-tsq firmware, x11dsc\+ firmware, x11ddw-nt firmware, x11ddw-l firmware, x11dgq firmware, x11dpff-sn firmware, x11dpfr-sn firmware, x11dpfr-s firmware, x11dpt-ps firmware, x11dpt-b firmware, x11dpt-bh firmware, x11dpt-l firmware, x11dpu firmware, x11dpu-v firmware, x11dpu-x firmware, x11dpu-xll firmware, x11dpu-z\+ firmware, x11dpu-ze\+ firmware, x11dpg-sn firmware, x11dpg-qt firmware, x11dpg-ot-cpu firmware, x11dpi-nt firmware, x11dpi-n firmware, x11dpl-i firmware, x11dpx-t firmware, x11dgo-t firmware, x11sca firmware, x11sca-f firmware, x11sch-f firmware, x11sch-ln4f firmware, x11sca-w firmware, x11scl-f firmware, x11scl-ln4f firmware, x11scl-if firmware, x11scm-f firmware, x11scm-ln8f firmware, x11scw-f firmware, x11spa-t firmware, x11spa-tf firmware, x11spi-tf firmware, x11spl-f firmware, x11spm-f firmware, x11spm-tf firmware, x11spm-tpf firmware, x11sph-nctf firmware, x11sph-nctpf firmware, x11spw-tf firmware, x11spw-ctf firmware, x11spg-tf firmware, x11sri-if firmware, x11srl-f firmware, x11srm-f firmware, x11srm-vf firmware, x11ssl-f firmware, x11ssm-f firmware, x11ssl firmware, x11ssm firmware, x11ssh-f firmware, x11ssh-ln4f firmware, x11ssw-4tf firmware, x11ssw-tf firmware, x11ssw-f firmware, x11ssi-ln4f firmware, x11ssh-tf firmware, x11ssh-ctf firmware, x11ssl-cf firmware, x11ssl-nf firmware, x11ssh-gf-1585 firmware, x11ssh-gf-1585l firmware, x11ssh-gtf-1585 firmware, x11ssh-gtf-1585l firmware, b11dpt firmware, b11dpe firmware, b11spe-cpu-tf firmware, b11spe-cpu-25g firmware, b11qpi firmware, x11ssd-f firmware, x11sse-f firmware, b2ss1-cpu firmware, b2ss1-cf firmware, b2ss1-f firmware, b2ss2-f firmware, b2ss1-mtf firmware, b2ss1-h-mtf firmware, b2ss2-mtf firmware, b2ss2-h-mtf firmware, x11scd-f firmware, x11sdd-8c-f firmware, x11sdd-18c-f firmware, x11qph\+ firmware, x11opi-cpu firmware, x11sds-8c firmware, x11sds-12c firmware, x11sds-16c firmware, x10ddw-i firmware, x10ddw-in firmware, x10drs firmware, x10drd-i firmware, x10drd-it firmware, x10drd-int firmware, x10drd-intp firmware, x10drd-itp firmware, x10drd-l firmware, x10drd-lt firmware, x10drd-ltp firmware, x10drx firmware, x10drh-c firmware, x10drh-ct firmware, x10drh-cln4 firmware, x10drh-i firmware, x10drh-it firmware, x10drh-iln4 firmware, x10dri firmware, x10dri-t firmware, x10drc-ln4\+ firmware, x10drc-t4\+ firmware, x10dri-ln4\+ firmware, x10dri-t4\+ firmware, x10drl-ln4 firmware, x10drl-i firmware, x10drl-it firmware, x10drl-c firmware, x10drl-ct firmware, x10drt-l firmware, x10drt-libq firmware, x10drt-libf firmware, x10drt-b\+ firmware, x10drt-h firmware, x10drt-hibf firmware, x10drt-ps firmware, x10drt-p firmware, x10drt-pt firmware, x10drt-pibq firmware, x10drt-pibf firmware, x10drfr-n firmware, x10drfr-nt firmware, x10drfr firmware, x10drfr-t firmware, x10drff-cg firmware, x10drff-ctg firmware, x10drff-ig firmware, x10drff-itg firmware, x10drff firmware, x10drff-c firmware, x10drw-n firmware, x10drw-nt firmware, x10drw-e firmware, x10drw-et firmware, x10drw-i firmware, x10drw-it firmware, x10dsn-ts firmware, x10drg-ot\+-cpu firmware, x10drg-o\+-cpu firmware, x10dgo-t firmware, x10dgq firmware, x10drg-q firmware, x10drg-h firmware, x10drg-ht firmware, x10dru-i\+ firmware, x10dru-x firmware, x10dru-xll firmware, x10dsc\+ firmware, x10sra-f firmware, x10sra firmware, x10srd-f firmware, x10srm-f firmware, x10srm-tf firmware, x10srl-f firmware, x10sri-f firmware, x10srh-cf firmware, x10srh-cln4f firmware, x10srg-f firmware, x10srw-f firmware, x10sae firmware, x10sat firmware, x10slx-f firmware, x10sld-f firmware, x10sld-hf firmware, x10sle-f firmware, x10sle-hf firmware, x10sle-df firmware, x10sl7-f firmware, x10sla-f firmware, x10slh-f firmware, x10sll\+-f firmware, x10sll-f firmware, x10sll-sf firmware, x10sll-s firmware, x10slm-f firmware, x10slm\+-f firmware, x10slm\+-ln4f firmware, x10sde-df firmware, x10sdd-16c-f firmware, x10sdd-f firmware, b1sd1-16c-tf firmware, b1sd1-tf firmware, b1sd2-16c-tf firmware, b1sd2-tf firmware, b10drc firmware, b10drc-n firmware, b10dri firmware, b10dri-n firmware, b10drg-ibf firmware, b10drg-ibf2 firmware, b10drg-tp firmware, b10drt firmware, b10drt-ibf firmware, b10drt-ibf2 firmware, b10drt-tp firmware, x10qrh\+ firmware, x10qbl-4 firmware, x10qbl-4ct firmware, x10qbl firmware, x10qbl-ct firmware, x10qbi firmware, x10obi-cpu firmware, x10dbt-t firmware, x10sdv-7tp8f firmware, x10sdv-7tp4f firmware, x10sdv-2c-7tp4f firmware, x10sdv-4c-7tp4f firmware, x10sdv-2c-tp4f firmware, x10sdv-4c\+-tp4f firmware, x10sdv-2c-tp8f firmware, x10sdv-tp8f firmware, x10sdv-f firmware, x10sdv-tln4f firmware, x10sdv-8c-tln4f firmware, x10sdv-6c-tln4f firmware, x10sdv-2c-tln2f firmware, x10sdv-4c-tln2f firmware, x10sdv-4c-tln4f firmware, x10sdv-4c\+-tln4f firmware, x10sdv-6c\+-tln4f firmware, x10sdv-8c-tln4f\+ firmware, x10sdv-8c\+-ln2f firmware, x10sdv-12c-tln4f firmware, x10sdv-12c-tln4f\+ firmware, x10sdv-12c\+-tln4f firmware, x10sdv-16c\+-tln4f firmware, x10sdv-16c-tln4f\+ firmware, x10sdv-16c-tln4f firmware, a1srm-ln7f-2358 firmware, a1srm-ln7f-2758 firmware, a1srm-ln5f-2358 firmware, a1sa2-2750f firmware, a1sam-2750f firmware, a1sam-2550f firmware, a1srm-2758f firmware, a1srm-2558f firmware, a1sai-2750f firmware, a1sai-2550f firmware, a1sri-2758f firmware, a1sri-2558f firmware, a1sri-2358f firmware
Vulnerable Versions:
1.71.5, 1.74, 3.74, 1.23.2, 3.75.00, 1.71.6, 3.74.2, 1.31.1, 1.56, 3.85.00, 3.68, 3.83, 3.80, 3.81
Timeline
Official Publish:
September 21st, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.