x8sti-f_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/x8sti-f_firmware/ Sun, 26 Feb 2023 06:32:09 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png x8sti-f_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/x8sti-f_firmware/ 32 32 CVE-2019-19642 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19642/ Sun, 26 Feb 2023 06:32:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19642/ On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or ShareName. The attacker can achieve a persistent backdoor.

The post CVE-2019-19642 appeared first on CVE Vulnerability.

]]> On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or ShareName. The attacker can achieve a persistent backdoor.

The post CVE-2019-19642 appeared first on CVE Vulnerability.

]]>