Two vulnerabilities affecting the firmware of Supermicro hardware, including Baseboard Management Controller (BMC) allow attackers to update systems with maliciously crafted images. Supermicro is a maker of servers, motherboards, and data center hardware. BMC is a microcontroller on Supermicro server motherboards that permits remote system monitoring and management even if the system is powered off. Experts at firmware security company Binarly discovered a bypass for a flaw (CVE-2024-10237) that Supermicro patched this year in January along with another vulnerabililty identified as CVE-2025-6198. "This security issue could allow potential attackers to gain complete and persistent control of both the BMC system and the main server OS," Binarly researchers say. Both security issues can be…