CVE-2018-13787: Supermicro a1sa Firmware

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.

Affected products

• Supermicro a1sa Firmware: affected versions not specified
• Supermicro a1sai1 Firmware: affected versions not specified
• Supermicro a1sai Firmware: affected versions not specified
• Supermicro a1sam Firmware: affected versions not specified
• Supermicro a1srm Firmware: affected versions not specified
• Supermicro a2san Firmware: affected versions not specified
• Supermicro a2sap Firmware: affected versions not specified
• Supermicro a2sav Firmware: affected versions not specified
• Supermicro b10drg Firmware: affected versions not specified
• Supermicro b10dri Firmware: affected versions not specified
• Supermicro b10drt Firmware: affected versions not specified
• Supermicro b1dri Firmware: affected versions not specified
• Supermicro b1sa4 Firmware: affected versions not specified
• Supermicro b1sd2tf Firmware: affected versions not specified
• Supermicro c7b250 Firmware: affected versions not specified
• Supermicro c7h270 Firmware: affected versions not specified
• Supermicro c7q270 Firmware: affected versions not specified
• Supermicro c7x99oc Firmware: affected versions not specified
• Supermicro c7z170 Firmware: affected versions not specified
• Supermicro c7z170o Firmware: affected versions not specified
• Supermicro c7z170oce Firmware: affected versions not specified
• Supermicro c7z270c Firmware: affected versions not specified
• Supermicro c7z270cg Firmware: affected versions not specified
• Supermicro c7z270l Firmware: affected versions not specified
• Supermicro c7z270m Firmware: affected versions not specified
• and 85 more

Published 2018-07-09. Last modified 2026-06-17.