7.5

CVE-2024-36432

An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with BIOS firmware before 4.4.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Vendorsupermicro
≫
Product x11dpg-hgx2_firmware
Default Statusunknown
Version < 4.4
Version 0
Status affected
Vendorsupermicro
≫
Product x11pdg-qt_firmware
Default Statusunknown
Version < 4.4
Version 0
Status affected
Vendorsupermicro
≫
Product x11pdg-ot_firmware
Default Statusunknown
Version < 4.4
Version 0
Status affected
Vendorsupermicro
≫
Product x11pdg-sn_firmware
Default Statusunknown
Version < 4.4
Version 0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.078
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
cve@mitre.org 7.5 0.8 6
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-1246 Improper Write Handling in Limited-write Non-Volatile Memories

The product does not implement or incorrectly implements wear leveling operations in limited-write non-volatile memories.