Skip to main content

X12Scv W Firmware

5 CVEs product

Monthly

CVE-2023-33413 Dec 07, 18:15 HIGH This Week

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass X11Ssl Cf Firmware X11Dac Firmware X11Dai N Firmware X11Ddw L Firmware +353
NVD VulDB
CVSS 3.1
8.8
EPSS
1.0%
CVE-2023-33412 Dec 07, 18:15 HIGH This Week

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure X11Ssl Cf Firmware X11Dac Firmware X11Dai N Firmware X11Ddw L Firmware +353
NVD VulDB
CVSS 3.1
8.8
EPSS
1.2%
CVE-2023-33411 Dec 07, 18:15 HIGH This Week

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal X11Ssl Cf Firmware X11Dac Firmware X11Dai N Firmware X11Ddw L Firmware +353
NVD VulDB
CVSS 3.1
7.5
EPSS
1.3%
CVE-2023-34853 Aug 22, 19:16 HIGH This Week

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption X11Ssl Cf Firmware X11Dac Firmware X11Dai N Firmware +269
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-35861 Jul 31, 13:15 CRITICAL POC Act Now

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection X12Dai N6 Firmware X12Ddw A6 Firmware X12Dpg Qt6 Firmware X12Dpi N6 Firmware +162
NVD
CVSS 3.1
9.8
EPSS
1.5%
EPSS 1% CVSS 8.8
HIGH This Week

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass X11Ssl Cf Firmware X11Dac Firmware +355
NVD VulDB
EPSS 1% CVSS 8.8
HIGH This Week

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure X11Ssl Cf Firmware X11Dac Firmware +355
NVD VulDB
EPSS 1% CVSS 7.5
HIGH This Week

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal X11Ssl Cf Firmware X11Dac Firmware +355
NVD VulDB
EPSS 0% CVSS 7.8
HIGH This Week

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption X11Ssl Cf Firmware +271
NVD
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection X12Dai N6 Firmware X12Ddw A6 Firmware +164
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy