2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","platforms":["BMC"],"product":"AS-2115HS-TNR","vendor":"SMCI","versions":[{"status":"affected","version":"01.08.01"},{"status":"affected","version":"01.06.04"}]}],"source":"def9a96e-e099-41a9-bfac-30fd4f82c411"}],"cveTags":[],"descriptions":[{"lang":"en","value":"There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. \nAn attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process invocation.\n\nPotential impact includes denial-of-service attacks, arbitrary code execution, or permanent compromise of the controller."},{"lang":"es","value":"Hay una vulnerabilidad en el servicio SMTP del BMC de Supermicro en el Supermicro AS-2115HS-TNR.\nUn atacante puede obtener privilegios de administrador e inyectar caracteres especialmente diseñados en la configuración del servicio SMTP. Esto puede causar que el sistema subyacente ejecute comandos no deseados durante la invocación del proceso.\n\nEl impacto potencial incluye ataques de denegación de servicio, ejecución de código arbitrario o el compromiso permanente del controlador."}],"id":"CVE-2026-3820","lastModified":"2026-07-22T20:10:00.127","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"def9a96e-e099-41a9-bfac-30fd4f82c411","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3820","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-06-04T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-06-04T09:16:28.980","references":[{"source":"def9a96e-e099-41a9-bfac-30fd4f82c411","url":"https://www.supermicro.com/en/support/security_BMC_IPMI_Jun_2026"}],"sourceIdentifier":"def9a96e-e099-41a9-bfac-30fd4f82c411","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"def9a96e-e099-41a9-bfac-30fd4f82c411","type":"Secondary"}]}
|