CVE-2019-16649

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-287 CWE-326 CWE-522

Affected software

No affected versions have been published.

Timeline

Published: Sep 21, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-16656.1A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct CVE-2019-1665010.0On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket fil CVE-2019-166515.3An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have insufficient protectio CVE-2019-166527.2The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands.CVE-2019-166538.8An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin privileges.CVE-2019-166557.5joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.CVE-2019-166569.8joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the dat CVE-2019-166576.1TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.CVE-2019-166588.8TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.CVE-2019-166598.8TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.CVE-2019-16665.3A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from th CVE-2019-166608.8joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF.