Critical Supermicro BMC Flaws Let Attackers Bypass Root of Trust with Malicious Firmware

Cybersecurity researchers discovered two critical vulnerabilities (CVE-2025-7937 and CVE-2025-6198) in Supermicro's BMC firmware that allow attackers to bypass security verification and install malicious firmware. The flaws exploit weaknesses in cryptographic signature verification by redi...