The BMC does not enforce the integrity and encryption requirements for IPMI commands received over active RMCP+ sessions. An attacker can craft malicious packets that trigger arbitrary command execution on the system through the BMC interface, providing direct control over the host. This flaw aligns with CWE-306, indicating a lack of proper authentication when access controls are bypassed.

Machines running the Supermicro BMC firmware on the X12SPI platform are affected. The vendor product identifier is SMCI:X12SPI, and only the current firmware without the fix is addressed. Specific version information is not supplied, so all unpatched hardware using this BMC should be considered vulnerable.

The CVSS score of 9.8 reflects critical severity. Although an EPSS score is not available, the lack of encryption or integrity does not prevent remote exploitation over any network that can reach the BMC. The vulnerability is not documented in CISA KEV, but its high CVSS and lack of mitigation suggest a high likelihood that attackers could target systems that expose IPMI, making the risk substantial for organizations with remote management.