Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability

Summary

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

Remediation

1. Inventory every SMCI MBD-X12SPI deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1