Supermicro x11dph-I vulnerabilities

2 CVEs affecting Supermicro x11dph-I, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-36434, published 2024-07-15.

More from Supermicro.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-36434, published 2024-07-15. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4.
• CVE-2024-36433, published 2024-07-15. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4.