Supermicro has patched two BMC vulnerabilities that can be exploited to perform malicious firmware updates on impacted devices.