Vulnerabilities > Supermicro > X8Sti F Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-12-08 CVE-2019-19642 OS Command Injection vulnerability in Supermicro X8Sti-F Bios and X8Sti-F Firmware
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address.
network
low complexity
supermicro CWE-78
critical
9.0