MBD-X12SPI vulnerabilities

3 known vulnerabilities in MBD-X12SPI from SMCI. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  MBD-X12SPI: Improper Authentication

  CVE-2026-65211Oct 27, 2026SMCI

  This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

• 8.8 High severity

  MBD-X12SPI: Improper Privilege Management

  CVE-2026-65220Oct 27, 2026SMCI

  A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

• 7.4 High severity

  MBD-X12SPI: Incorrect Behavior Order

  CVE-2026-65219Oct 27, 2026SMCI

  A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.