{"answers":{"affected":"It affects 336 products.","exploited":"There is no known exploitation of CVE-2019-16649 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2019-16649 yet. Limit exposure of the affected software until one is available.","what":"CVE-2019-16649 is a critical vulnerability in n/a, published on 21 Sep 2019. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2019-16649 and fix it if it is affected.\n\nWhat it is: CVE-2019-16649 is a critical vulnerability in n/a, published on 21 Sep 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2019-16649 in the wild and no public exploit code.\n\nAffected product: n/a. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2019-16649/ (Markdown: https://insights.sbomify.com/CVE-2019-16649/index.md)","id":"CVE-2019-16649","markdown":"https://insights.sbomify.com/CVE-2019-16649/index.md","name":"CVE-2019-16649","record":{"aliases":["GHSA-w4w7-g55h-mxxx"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["data_read","privilege_escalation"],"network_reachable":"yes","non_default_config":false,"product_category":"Supermicro BMC","requires_auth":"none","summary":"Weak encryption and authentication in Supermicro BMC virtual media allow attackers to capture credentials and data, enabling unauthorized device connections.","user_interaction":"not_required","vuln_class":"weak_cryptography"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"mitre","cpe":[{"product":"a1sa2-2750f_firmware","vendor":"supermicro"},{"product":"a1sai-2550f_firmware","vendor":"supermicro"},{"product":"a1sai-2750f_firmware","vendor":"supermicro"},{"product":"a1sam-2550f_firmware","vendor":"supermicro"},{"product":"a1sam-2750f_firmware","vendor":"supermicro"},{"product":"a1sri-2358f_firmware","vendor":"supermicro"},{"product":"a1sri-2558f_firmware","vendor":"supermicro"},{"product":"a1sri-2758f_firmware","vendor":"supermicro"},{"product":"a1srm-2558f_firmware","vendor":"supermicro"},{"product":"a1srm-2758f_firmware","vendor":"supermicro"},{"product":"a1srm-ln5f-2358_firmware","vendor":"supermicro"},{"product":"a1srm-ln7f-2358_firmware","vendor":"supermicro"},{"product":"a1srm-ln7f-2758_firmware","vendor":"supermicro"},{"product":"b10drc-n_firmware","vendor":"supermicro"},{"product":"b10drc_firmware","vendor":"supermicro"},{"product":"b10drg-ibf2_firmware","vendor":"supermicro"},{"product":"b10drg-ibf_firmware","vendor":"supermicro"},{"product":"b10drg-tp_firmware","vendor":"supermicro"},{"product":"b10dri-n_firmware","vendor":"supermicro"},{"product":"b10dri_firmware","vendor":"supermicro"},{"product":"b10drt-ibf2_firmware","vendor":"supermicro"},{"product":"b10drt-ibf_firmware","vendor":"supermicro"},{"product":"b10drt-tp_firmware","vendor":"supermicro"},{"product":"b10drt_firmware","vendor":"supermicro"},{"product":"b11dpe_firmware","vendor":"supermicro"},{"product":"b11dpt_firmware","vendor":"supermicro"},{"product":"b11qpi_firmware","vendor":"supermicro"},{"product":"b11spe-cpu-25g_firmware","vendor":"supermicro"},{"product":"b11spe-cpu-tf_firmware","vendor":"supermicro"},{"product":"b1sd1-16c-tf_firmware","vendor":"supermicro"},{"product":"b1sd1-tf_firmware","vendor":"supermicro"},{"product":"b1sd2-16c-tf_firmware","vendor":"supermicro"},{"product":"b1sd2-tf_firmware","vendor":"supermicro"},{"product":"b2ss1-cf_firmware","vendor":"supermicro"},{"product":"b2ss1-cpu_firmware","vendor":"supermicro"},{"product":"b2ss1-f_firmware","vendor":"supermicro"},{"product":"b2ss1-h-mtf_firmware","vendor":"supermicro"},{"product":"b2ss1-mtf_firmware","vendor":"supermicro"},{"product":"b2ss2-f_firmware","vendor":"supermicro"},{"product":"b2ss2-h-mtf_firmware","vendor":"supermicro"},{"product":"b2ss2-mtf_firmware","vendor":"supermicro"},{"product":"b9dr7_firmware","vendor":"supermicro"},{"product":"b9drg-3m_firmware","vendor":"supermicro"},{"product":"b9drg-e_firmware","vendor":"supermicro"},{"product":"b9drg_firmware","vendor":"supermicro"},{"product":"b9dri_firmware","vendor":"supermicro"},{"product":"b9drp_firmware","vendor":"supermicro"},{"product":"b9drt_firmware","vendor":"supermicro"},{"product":"b9qr7\\(-tp\\)_firmware","vendor":"supermicro"},{"product":"m11sdv-4c-ln4f_firmware","vendor":"supermicro"},{"product":"m11sdv-4ct-ln4f_firmware","vendor":"supermicro"},{"product":"m11sdv-8c-ln4f_firmware","vendor":"supermicro"},{"product":"m11sdv-8c\\+-ln4f_firmware","vendor":"supermicro"},{"product":"m11sdv-8ct-ln4f_firmware","vendor":"supermicro"},{"product":"x10dbt-t_firmware","vendor":"supermicro"},{"product":"x10ddw-i_firmware","vendor":"supermicro"},{"product":"x10ddw-in_firmware","vendor":"supermicro"},{"product":"x10dgo-t_firmware","vendor":"supermicro"},{"product":"x10dgq_firmware","vendor":"supermicro"},{"product":"x10drc-ln4\\+_firmware","vendor":"supermicro"},{"product":"x10drc-t4\\+_firmware","vendor":"supermicro"},{"product":"x10drd-i_firmware","vendor":"supermicro"},{"product":"x10drd-int_firmware","vendor":"supermicro"},{"product":"x10drd-intp_firmware","vendor":"supermicro"},{"product":"x10drd-it_firmware","vendor":"supermicro"},{"product":"x10drd-itp_firmware","vendor":"supermicro"},{"product":"x10drd-l_firmware","vendor":"supermicro"},{"product":"x10drd-lt_firmware","vendor":"supermicro"},{"product":"x10drd-ltp_firmware","vendor":"supermicro"},{"product":"x10drff-c_firmware","vendor":"supermicro"},{"product":"x10drff-cg_firmware","vendor":"supermicro"},{"product":"x10drff-ctg_firmware","vendor":"supermicro"},{"product":"x10drff-ig_firmware","vendor":"supermicro"},{"product":"x10drff-itg_firmware","vendor":"supermicro"},{"product":"x10drff_firmware","vendor":"supermicro"},{"product":"x10drfr-n_firmware","vendor":"supermicro"},{"product":"x10drfr-nt_firmware","vendor":"supermicro"},{"product":"x10drfr-t_firmware","vendor":"supermicro"},{"product":"x10drfr_firmware","vendor":"supermicro"},{"product":"x10drg-h_firmware","vendor":"supermicro"},{"product":"x10drg-ht_firmware","vendor":"supermicro"},{"product":"x10drg-o\\+-cpu_firmware","vendor":"supermicro"},{"product":"x10drg-ot\\+-cpu_firmware","vendor":"supermicro"},{"product":"x10drg-q_firmware","vendor":"supermicro"},{"product":"x10drh-c_firmware","vendor":"supermicro"},{"product":"x10drh-cln4_firmware","vendor":"supermicro"},{"product":"x10drh-ct_firmware","vendor":"supermicro"},{"product":"x10drh-i_firmware","vendor":"supermicro"},{"product":"x10drh-iln4_firmware","vendor":"supermicro"},{"product":"x10drh-it_firmware","vendor":"supermicro"},{"product":"x10dri-ln4\\+_firmware","vendor":"supermicro"},{"product":"x10dri-t4\\+_firmware","vendor":"supermicro"},{"product":"x10dri-t_firmware","vendor":"supermicro"},{"product":"x10dri_firmware","vendor":"supermicro"},{"product":"x10drl-c_firmware","vendor":"supermicro"},{"product":"x10drl-ct_firmware","vendor":"supermicro"},{"product":"x10drl-i_firmware","vendor":"supermicro"},{"product":"x10drl-it_firmware","vendor":"supermicro"},{"product":"x10drl-ln4_firmware","vendor":"supermicro"},{"product":"x10drs_firmware","vendor":"supermicro"},{"product":"x10drt-b\\+_firmware","vendor":"supermicro"},{"product":"x10drt-h_firmware","vendor":"supermicro"},{"product":"x10drt-hibf_firmware","vendor":"supermicro"},{"product":"x10drt-l_firmware","vendor":"supermicro"},{"product":"x10drt-libf_firmware","vendor":"supermicro"},{"product":"x10drt-libq_firmware","vendor":"supermicro"},{"product":"x10drt-p_firmware","vendor":"supermicro"},{"product":"x10drt-pibf_firmware","vendor":"supermicro"},{"product":"x10drt-pibq_firmware","vendor":"supermicro"},{"product":"x10drt-ps_firmware","vendor":"supermicro"},{"product":"x10drt-pt_firmware","vendor":"supermicro"},{"product":"x10dru-i\\+_firmware","vendor":"supermicro"},{"product":"x10dru-x_firmware","vendor":"supermicro"},{"product":"x10dru-xll_firmware","vendor":"supermicro"},{"product":"x10drw-e_firmware","vendor":"supermicro"},{"product":"x10drw-et_firmware","vendor":"supermicro"},{"product":"x10drw-i_firmware","vendor":"supermicro"},{"product":"x10drw-it_firmware","vendor":"supermicro"},{"product":"x10drw-n_firmware","vendor":"supermicro"},{"product":"x10drw-nt_firmware","vendor":"supermicro"},{"product":"x10drx_firmware","vendor":"supermicro"},{"product":"x10dsc\\+_firmware","vendor":"supermicro"},{"product":"x10dsn-ts_firmware","vendor":"supermicro"},{"product":"x10obi-cpu_firmware","vendor":"supermicro"},{"product":"x10qbi_firmware","vendor":"supermicro"},{"product":"x10qbl-4_firmware","vendor":"supermicro"},{"product":"x10qbl-4ct_firmware","vendor":"supermicro"},{"product":"x10qbl-ct_firmware","vendor":"supermicro"},{"product":"x10qbl_firmware","vendor":"supermicro"},{"product":"x10qrh\\+_firmware","vendor":"supermicro"},{"product":"x10sae_firmware","vendor":"supermicro"},{"product":"x10sat_firmware","vendor":"supermicro"},{"product":"x10sdd-16c-f_firmware","vendor":"supermicro"},{"product":"x10sdd-f_firmware","vendor":"supermicro"},{"product":"x10sde-df_firmware","vendor":"supermicro"},{"product":"x10sdv-12c-tln4f\\+_firmware","vendor":"supermicro"},{"product":"x10sdv-12c-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-12c\\+-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-16c-tln4f\\+_firmware","vendor":"supermicro"},{"product":"x10sdv-16c-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-16c\\+-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-2c-7tp4f_firmware","vendor":"supermicro"},{"product":"x10sdv-2c-tln2f_firmware","vendor":"supermicro"},{"product":"x10sdv-2c-tp4f_firmware","vendor":"supermicro"},{"product":"x10sdv-2c-tp8f_firmware","vendor":"supermicro"},{"product":"x10sdv-4c-7tp4f_firmware","vendor":"supermicro"},{"product":"x10sdv-4c-tln2f_firmware","vendor":"supermicro"},{"product":"x10sdv-4c-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-4c\\+-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-4c\\+-tp4f_firmware","vendor":"supermicro"},{"product":"x10sdv-6c-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-6c\\+-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-7tp4f_firmware","vendor":"supermicro"},{"product":"x10sdv-7tp8f_firmware","vendor":"supermicro"},{"product":"x10sdv-8c-tln4f\\+_firmware","vendor":"supermicro"},{"product":"x10sdv-8c-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-8c\\+-ln2f_firmware","vendor":"supermicro"},{"product":"x10sdv-f_firmware","vendor":"supermicro"},{"product":"x10sdv-tln4f_firmware","vendor":"supermicro"},{"product":"x10sdv-tp8f_firmware","vendor":"supermicro"},{"product":"x10sl7-f_firmware","vendor":"supermicro"},{"product":"x10sla-f_firmware","vendor":"supermicro"},{"product":"x10sld-f_firmware","vendor":"supermicro"},{"product":"x10sld-hf_firmware","vendor":"supermicro"},{"product":"x10sle-df_firmware","vendor":"supermicro"},{"product":"x10sle-f_firmware","vendor":"supermicro"},{"product":"x10sle-hf_firmware","vendor":"supermicro"},{"product":"x10slh-f_firmware","vendor":"supermicro"},{"product":"x10sll-f_firmware","vendor":"supermicro"},{"product":"x10sll-s_firmware","vendor":"supermicro"},{"product":"x10sll-sf_firmware","vendor":"supermicro"},{"product":"x10sll\\+-f_firmware","vendor":"supermicro"},{"product":"x10slm-f_firmware","vendor":"supermicro"},{"product":"x10slm\\+-f_firmware","vendor":"supermicro"},{"product":"x10slm\\+-ln4f_firmware","vendor":"supermicro"},{"product":"x10slx-f_firmware","vendor":"supermicro"},{"product":"x10sra-f_firmware","vendor":"supermicro"},{"product":"x10sra_firmware","vendor":"supermicro"},{"product":"x10srd-f_firmware","vendor":"supermicro"},{"product":"x10srg-f_firmware","vendor":"supermicro"},{"product":"x10srh-cf_firmware","vendor":"supermicro"},{"product":"x10srh-cln4f_firmware","vendor":"supermicro"},{"product":"x10sri-f_firmware","vendor":"supermicro"},{"product":"x10srl-f_firmware","vendor":"supermicro"},{"product":"x10srm-f_firmware","vendor":"supermicro"},{"product":"x10srm-tf_firmware","vendor":"supermicro"},{"product":"x10srw-f_firmware","vendor":"supermicro"},{"product":"x11dac_firmware","vendor":"supermicro"},{"product":"x11dai-n_firmware","vendor":"supermicro"},{"product":"x11ddw-l_firmware","vendor":"supermicro"},{"product":"x11ddw-nt_firmware","vendor":"supermicro"},{"product":"x11dgo-t_firmware","vendor":"supermicro"},{"product":"x11dgq_firmware","vendor":"supermicro"},{"product":"x11dpff-sn_firmware","vendor":"supermicro"},{"product":"x11dpfr-s_firmware","vendor":"supermicro"},{"product":"x11dpfr-sn_firmware","vendor":"supermicro"},{"product":"x11dpg-ot-cpu_firmware","vendor":"supermicro"},{"product":"x11dpg-qt_firmware","vendor":"supermicro"},{"product":"x11dpg-sn_firmware","vendor":"supermicro"},{"product":"x11dph-i_firmware","vendor":"supermicro"},{"product":"x11dph-t_firmware","vendor":"supermicro"},{"product":"x11dph-tq_firmware","vendor":"supermicro"},{"product":"x11dpi-n_firmware","vendor":"supermicro"},{"product":"x11dpi-nt_firmware","vendor":"supermicro"},{"product":"x11dpl-i_firmware","vendor":"supermicro"},{"product":"x11dps-re_firmware","vendor":"supermicro"},{"product":"x11dpt-b_firmware","vendor":"supermicro"},{"product":"x11dpt-bh_firmware","vendor":"supermicro"},{"product":"x11dpt-l_firmware","vendor":"supermicro"},{"product":"x11dpt-ps_firmware","vendor":"supermicro"},{"product":"x11dpu-v_firmware","vendor":"supermicro"},{"product":"x11dpu-x_firmware","vendor":"supermicro"},{"product":"x11dpu-xll_firmware","vendor":"supermicro"},{"product":"x11dpu-z\\+_firmware","vendor":"supermicro"},{"product":"x11dpu-ze\\+_firmware","vendor":"supermicro"},{"product":"x11dpu_firmware","vendor":"supermicro"},{"product":"x11dpx-t_firmware","vendor":"supermicro"},{"product":"x11dsc\\+_firmware","vendor":"supermicro"},{"product":"x11dsf-e_firmware","vendor":"supermicro"},{"product":"x11dsn-ts_firmware","vendor":"supermicro"},{"product":"x11dsn-tsq_firmware","vendor":"supermicro"},{"product":"x11opi-cpu_firmware","vendor":"supermicro"},{"product":"x11qph\\+_firmware","vendor":"supermicro"},{"product":"x11sca-f_firmware","vendor":"supermicro"},{"product":"x11sca-w_firmware","vendor":"supermicro"},{"product":"x11sca_firmware","vendor":"supermicro"},{"product":"x11scd-f_firmware","vendor":"supermicro"},{"product":"x11sch-f_firmware","vendor":"supermicro"},{"product":"x11sch-ln4f_firmware","vendor":"supermicro"},{"product":"x11scl-f_firmware","vendor":"supermicro"},{"product":"x11scl-if_firmware","vendor":"supermicro"},{"product":"x11scl-ln4f_firmware","vendor":"supermicro"},{"product":"x11scm-f_firmware","vendor":"supermicro"},{"product":"x11scm-ln8f_firmware","vendor":"supermicro"},{"product":"x11scw-f_firmware","vendor":"supermicro"},{"product":"x11sdd-18c-f_firmware","vendor":"supermicro"},{"product":"x11sdd-8c-f_firmware","vendor":"supermicro"},{"product":"x11sds-12c_firmware","vendor":"supermicro"},{"product":"x11sds-16c_firmware","vendor":"supermicro"},{"product":"x11sds-8c_firmware","vendor":"supermicro"},{"product":"x11spa-t_firmware","vendor":"supermicro"},{"product":"x11spa-tf_firmware","vendor":"supermicro"},{"product":"x11spg-tf_firmware","vendor":"supermicro"},{"product":"x11sph-nctf_firmware","vendor":"supermicro"},{"product":"x11sph-nctpf_firmware","vendor":"supermicro"},{"product":"x11spi-tf_firmware","vendor":"supermicro"},{"product":"x11spl-f_firmware","vendor":"supermicro"},{"product":"x11spm-f_firmware","vendor":"supermicro"},{"product":"x11spm-tf_firmware","vendor":"supermicro"},{"product":"x11spm-tpf_firmware","vendor":"supermicro"},{"product":"x11spw-ctf_firmware","vendor":"supermicro"},{"product":"x11spw-tf_firmware","vendor":"supermicro"},{"product":"x11sri-if_firmware","vendor":"supermicro"},{"product":"x11srl-f_firmware","vendor":"supermicro"},{"product":"x11srm-f_firmware","vendor":"supermicro"},{"product":"x11srm-vf_firmware","vendor":"supermicro"},{"product":"x11ssd-f_firmware","vendor":"supermicro"},{"product":"x11sse-f_firmware","vendor":"supermicro"},{"product":"x11ssh-ctf_firmware","vendor":"supermicro"},{"product":"x11ssh-f_firmware","vendor":"supermicro"},{"product":"x11ssh-gf-1585_firmware","vendor":"supermicro"},{"product":"x11ssh-gf-1585l_firmware","vendor":"supermicro"},{"product":"x11ssh-gtf-1585_firmware","vendor":"supermicro"},{"product":"x11ssh-gtf-1585l_firmware","vendor":"supermicro"},{"product":"x11ssh-ln4f_firmware","vendor":"supermicro"},{"product":"x11ssh-tf_firmware","vendor":"supermicro"},{"product":"x11ssi-ln4f_firmware","vendor":"supermicro"},{"product":"x11ssl-cf_firmware","vendor":"supermicro"},{"product":"x11ssl-f_firmware","vendor":"supermicro"},{"product":"x11ssl-nf_firmware","vendor":"supermicro"},{"product":"x11ssl_firmware","vendor":"supermicro"},{"product":"x11ssm-f_firmware","vendor":"supermicro"},{"product":"x11ssm_firmware","vendor":"supermicro"},{"product":"x11ssw-4tf_firmware","vendor":"supermicro"},{"product":"x11ssw-f_firmware","vendor":"supermicro"},{"product":"x11ssw-tf_firmware","vendor":"supermicro"},{"product":"x9da7\\/e_firmware","vendor":"supermicro"},{"product":"x9dai_firmware","vendor":"supermicro"},{"product":"x9dal-3\\/i_firmware","vendor":"supermicro"},{"product":"x9dax-7\\/i\\(t\\)f_firmware","vendor":"supermicro"},{"product":"x9dax-7\\/if-hft_firmware","vendor":"supermicro"},{"product":"x9db3\\/i-\\(tp\\)f_firmware","vendor":"supermicro"},{"product":"x9dbl-3\\/i\\(f\\)_firmware","vendor":"supermicro"},{"product":"x9dbs-f\\(-2u\\)_firmware","vendor":"supermicro"},{"product":"x9dbu-3\\/if_firmware","vendor":"supermicro"},{"product":"x9dr3\\/i-f_firmware","vendor":"supermicro"},{"product":"x9dr3\\/i-ln4f\\+_firmware","vendor":"supermicro"},{"product":"x9dr7-jln4f_firmware","vendor":"supermicro"},{"product":"x9dr7\\/e-ln4f_firmware","vendor":"supermicro"},{"product":"x9dr7\\/e-tf\\+_firmware","vendor":"supermicro"},{"product":"x9drd-7ln4f_series_firmware","vendor":"supermicro"},{"product":"x9drd-c\\(n\\)t\\+_firmware","vendor":"supermicro"},{"product":"x9drd-ef_firmware","vendor":"supermicro"},{"product":"x9drd-it\\+_firmware","vendor":"supermicro"},{"product":"x9drd-l\\/if_firmware","vendor":"supermicro"},{"product":"x9drff-7\\/i\\(t\\)\\+_firmware","vendor":"supermicro"},{"product":"x9drff-7\\/i\\(t\\)g\\+_firmware","vendor":"supermicro"},{"product":"x9drff\\(-7\\)_firmware","vendor":"supermicro"},{"product":"x9drfr_firmware","vendor":"supermicro"},{"product":"x9drg-h\\(t\\)f\\+_firmware","vendor":"supermicro"},{"product":"x9drg-h\\(t\\)f\\+ii_firmware","vendor":"supermicro"},{"product":"x9drg-h\\(t\\)f_firmware","vendor":"supermicro"},{"product":"x9drg-o\\(t\\)f-cpu_firmware","vendor":"supermicro"},{"product":"x9drg-qf_firmware","vendor":"supermicro"},{"product":"x9drh-7\\/i\\(t\\)f_firmware","vendor":"supermicro"},{"product":"x9drh-if-nv_firmware","vendor":"supermicro"},{"product":"x9drl-3\\/if_firmware","vendor":"supermicro"},{"product":"x9drl-7\\/ef_firmware","vendor":"supermicro"},{"product":"x9drt-h_series_firmware","vendor":"supermicro"},{"product":"x9drt-hf\\+_firmware","vendor":"supermicro"},{"product":"x9drt-p_series_firmware","vendor":"supermicro"},{"product":"x9drt_series_firmware","vendor":"supermicro"},{"product":"x9drw-3\\/if_firmware","vendor":"supermicro"},{"product":"x9drw-3ln4f\\+\\/3tf\\+_firmware","vendor":"supermicro"},{"product":"x9drw-7\\/itpf\\+_firmware","vendor":"supermicro"},{"product":"x9drw-7\\/itpf_firmware","vendor":"supermicro"},{"product":"x9drw-c\\(t\\)f31_firmware","vendor":"supermicro"},{"product":"x9drx\\+-f_firmware","vendor":"supermicro"},{"product":"x9qr7-tf\\+_firmware","vendor":"supermicro"},{"product":"x9qr7-tf_firmware","vendor":"supermicro"},{"product":"x9qri-f\\+_firmware","vendor":"supermicro"},{"product":"x9qri-f_firmware","vendor":"supermicro"},{"product":"x9sae\\(-v\\)_firmware","vendor":"supermicro"},{"product":"x9sca\\(-f\\)_firmware","vendor":"supermicro"},{"product":"x9scd_series_firmware","vendor":"supermicro"},{"product":"x9sci-ln4\\(f\\)_firmware","vendor":"supermicro"},{"product":"x9scl\\(-f\\)_firmware","vendor":"supermicro"},{"product":"x9scl\\+-f_firmware","vendor":"supermicro"},{"product":"x9scm\\(-f\\)_firmware","vendor":"supermicro"},{"product":"x9sra_firmware","vendor":"supermicro"},{"product":"x9srd-f_firmware","vendor":"supermicro"},{"product":"x9sre\\/i_series_firmware","vendor":"supermicro"},{"product":"x9srg-f_firmware","vendor":"supermicro"},{"product":"x9srh-7\\(t\\)f_firmware","vendor":"supermicro"},{"product":"x9srl\\(-f\\)_firmware","vendor":"supermicro"},{"product":"x9srw-f_firmware","vendor":"supermicro"}],"cvss":{"score":10,"severity":"critical","source":"nvd","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-522","name":"Insufficiently Protected Credentials"},{"id":"CWE-326","name":"Inadequate Encryption Strength"},{"id":"CWE-287","name":"Improper Authentication"}],"description":"On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Weak cryptography in n/a","id":"CVE-2019-16649","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"weak_cryptography","year":"2019"},"n_packages":0,"n_references":3,"next":{"headline":"Race condition in n/a","id":"CVE-2019-16650"},"packages":[],"prev":{"headline":"Other in n/a","id":"CVE-2019-16647"},"products":["n/a"],"published":"2019-09-21","related":[{"cvss_score":10,"headline":"Race condition in n/a","id":"CVE-2019-16650","kev_date_added":null,"published":"2019-09-21"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2024-08-05","vendors":["n/a"]},"summary":"Weak encryption and authentication in Supermicro BMC virtual media allow attackers to capture credentials and data, enabling unauthorized device connections.","url":"https://insights.sbomify.com/CVE-2019-16649/"}