CVE-2025-7937: Smci Mbd-x12stw

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image.

Affected products

• Smci Mbd-x12stw: version 01.06.17 only

Published 2025-09-19. Last modified 2026-06-17.