X12SPI vulnerabilities

2 known vulnerabilities in X12SPI from SMCI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  X12SPI: Missing Authentication for Critical Functionality

  CVE-2026-18450Oct 27, 2026SMCI

  The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

• 7.5 High severity

  X12SPI: Use of Hard-coded Credentials

  CVE-2026-18449Oct 27, 2026SMCI

  The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.