CVE-2026-3821 - Vulnerability Details - OpenCVE

Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Smci	X14dbg-dap X14dbi

No data.

No data.

References

Link	Providers
https://www.supermicro.com/en/support/security_BMC_IPMI_Jul_2026

History

Thu, 23 Jul 2026 21:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Smci Smci x14dbg-dap Smci x14dbi
Vendors & Products		Smci Smci x14dbg-dap Smci x14dbi

Wed, 22 Jul 2026 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 22 Jul 2026 06:45:00 +0000

Type	Values Removed	Values Added
Description		Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.
Title		Supermicro SMASH service contain an Arbitrary code execution issue
Weaknesses		CWE-78
References		https://www.supermicro.com/en/support/security_BMC_IPMI_Jul_2026
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Supermicro

Published: 2026-07-22T06:15:31.648Z

Updated: 2026-07-22T12:57:22.874Z

Reserved: 2026-03-09T02:52:17.984Z

Link: CVE-2026-3821

Vulnrichment

Updated: 2026-07-22T12:57:19.611Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3821", "assignerOrgId": "def9a96e-e099-41a9-bfac-30fd4f82c411", "state": "PUBLISHED", "assignerShortName": "Supermicro", "dateReserved": "2026-03-09T02:52:17.984Z", "datePublished": "2026-07-22T06:15:31.648Z", "dateUpdated": "2026-07-22T12:57:22.874Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "def9a96e-e099-41a9-bfac-30fd4f82c411", "shortName": "Supermicro", "dateUpdated": "2026-07-22T06:15:31.648Z"}, "title": "Supermicro SMASH service contain an Arbitrary code execution issue", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-78", "description": "CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "affected": [{"vendor": "SMCI", "product": "X14DBG-DAP,X14DBI", "versions": [{"status": "affected", "version": "01.00.16.00"}, {"status": "affected", "version": "1.03.02.06"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in\u00a0X14DBG-DAP and X14DBI.\nAn authorized attacker can exploit SMASH\u2019s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI.<br><span>An authorized attacker can exploit SMASH\u2019s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.</span></p>"}]}], "references": [{"url": "https://www.supermicro.com/en/support/security_BMC_IPMI_Jul_2026"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Anton Beidin and the research team at Eclypsium, Inc.", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-22T12:55:41.124871Z", "id": "CVE-2026-3821", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-22T12:57:22.874Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3821", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-22T12:55:41.124871Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-22T12:57:19.611Z"}}], "cna": {"title": "Supermicro SMASH service contain an Arbitrary code execution issue", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Anton Beidin and the research team at Eclypsium, Inc."}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "SMCI", "product": "X14DBG-DAP,X14DBI", "versions": [{"status": "affected", "version": "01.00.16.00"}, {"status": "affected", "version": "1.03.02.06"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.supermicro.com/en/support/security_BMC_IPMI_Jul_2026"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in\u00a0X14DBG-DAP and X14DBI.\nAn authorized attacker can exploit SMASH\u2019s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.", "supportingMedia": [{"type": "text/html", "value": "<p>Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI.<br><span>An authorized attacker can exploit SMASH\u2019s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.</span></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')"}]}], "providerMetadata": {"orgId": "def9a96e-e099-41a9-bfac-30fd4f82c411", "shortName": "Supermicro", "dateUpdated": "2026-07-22T06:15:31.648Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3821", "state": "PUBLISHED", "dateUpdated": "2026-07-22T12:57:22.874Z", "dateReserved": "2026-03-09T02:52:17.984Z", "assignerOrgId": "def9a96e-e099-41a9-bfac-30fd4f82c411", "datePublished": "2026-07-22T06:15:31.648Z", "assignerShortName": "Supermicro"}, "dataVersion": "5.2"}