Patch Bypassed for Supermicro Vulnerability Allowing BMC Hack - SecurityWeek
Supermicro patched two BMC vulnerabilities, CVE-2025-7937 and CVE-2025-6198, discovered by Binarly. These vulnerabilities, allowing malicious firmware updates and bypassing security features, highlight the fragility of firmware validation. While there is no evidence of exploitation, the vulnerabilities pose a significant risk to enterprise organizations.