Back to Database
Status published
High
CVE-2020-15046
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a...
Vulnerability Description
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/config_user.cgi CSRF issue to add new admin users. The fixed versions are BIOS 3.2 and firmware 03.88.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-15046
Credits & Attribution
No credits recorded in the NVD database.
References
More from supermicro
View All →CVE-2022-43309
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered...
Unknown
0
CVE-2019-19642
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS...
High
8.8
CVE-2019-16650
On Supermicro X10 and X11 products, a client's access privileges...
Critical
10
CVE-2019-16649
On Supermicro H11, H12, M11, X9, X10, and X11 products,...
Critical
10
CVE-2019-13131
Super Micro SuperDoctor 5, when restrictions are not implemented in...
Critical
9.8
Affected Vendor
supermicro
View all reports →Affected Software
x10drh-it bios, x10drh-it firmware
Vulnerable Versions:
2.0a, 3.40
Timeline
Official Publish:
June 24th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.