Attackers Exploit BMC Firmware Vulnerabilities to Bypass Signature Verification

Attackers are exploiting weaknesses in Supermicro’s Baseboard Management Controller (BMC) firmware validation logic to bypass signature verification and reflash the BMC SPI chip. The report notes that CVE-2024-10237 allowed malicious firmware images to bypass checks, with two companion CVEs—CVE-2024-10238 and CVE-2024-10239—stemming from improper parsing of the firmware region map and enabling arbitrary code execution within the BMC context.

On 5 January 2025, Supermicro’s security team published an advisory detailing three vulnerabilities in the BMC firmware image authentication design, and firmware updates were issued to block custom table entries and enforce stricter region whitelisting during validation.

In mid-2025, Binarly Research Team revealed that the patch for CVE-2024-10237 was insufficient, showing how injecting a malicious region map at a controlled offset could still pass checks, with the exploit now assigned CVE-2025-7937 and capable of arbitrary code execution at boot. The article also describes a related flaw, CVE-2025-6198, in the X13SEM-F firmware sig_table, which could move signed regions to unused flash areas while inserting malicious code elsewhere.

Administrators are advised to update BMC firmware to the latest vendor release, verify integrity via SHA-256, and enable hardware-backed RoT features where possible. According to Binarly Research Team, these vulnerabilities underscore the need for ongoing monitoring and vendor collaboration to protect firmware integrity at boot.