Database/Firmware, BMC & network fabric
Supermicro BMC firmware validation (MBD-X12STW): RoT bypass, crafted firmware image accepted
Impact
RoT bypass, crafted firmware image accepted; demonstrates the 2024 fix was incomplete
Who can reach it
Network, high-privilege
What to do
Second BMC flash cycle on nodes already patched for CVE-2024-10237 — the operational cost is that a fleet gets flashed twice for the same class of bug
Fleet impact
How widespread
very common - same Supermicro BMC image family
Cost to remediate
firmware-flash - a second flash cycle on nodes already flashed once; the first remediation round did not hold
Why it hits the whole fleet
Shows fleet firmware remediation is not one-and-done: the patch was bypassed, forcing a repeat out-of-band flash campaign across the same node population.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.