Supermicro has patched two BMC vulnerabilities that can be exploited to perform malicious firmware updates on impacted devices. According to firmware security company Binarly, one of these security holes is the result of a previously issued patch being bypassed. The BMC (Baseboard Management Controller), a specialized chip typically present on the motherboard of servers and high-end computers, provides out-of-band management capabilities that allow administrators to remotely monitor and manage the device, even if the operating system is down or the power is off. Supermicro informed customers in January that a researcher from Nvidia had discovered several BMC firmware vulnerabilities, including CVE-2024-10237, an image authentication issue that could allow an attacker to conduct malicious…