Skip to main content

X13San L Wohs Firmware

5 CVEs product

Monthly

CVE-2023-33413 HIGH This Week

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass M11Sdv 4C Ln4F Firmware M11Sdv 4Ct Ln4F Firmware M11Sdv 8C Ln4F Firmware M11Sdv 8Ct Ln4F Firmware +352
NVD VulDB
CVSS 3.1
8.8
EPSS
1.0%
CVE-2023-33412 HIGH This Week

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure M11Sdv 4C Ln4F Firmware M11Sdv 4Ct Ln4F Firmware M11Sdv 8C Ln4F Firmware M11Sdv 8Ct Ln4F Firmware +352
NVD VulDB
CVSS 3.1
8.8
EPSS
1.2%
CVE-2023-33411 HIGH This Week

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

X11Ssl Cf Firmware X11Dac Firmware X11Dai N Firmware X11Ddw L Firmware X11Ddw Nt Firmware +352
NVD VulDB
CVSS 3.1
7.5
EPSS
1.3%
CVE-2023-34853 HIGH This Week

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow X12Dai N6 Firmware X12Ddw A6 Firmware X12Dgo 6 Firmware +268
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-35861 CRITICAL POC Act Now

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection H12Dst B Firmware X13Dai T Firmware X13Ddw A Firmware X13Deg Oa Firmware +161
NVD
CVSS 3.1
9.8
EPSS
1.5%
EPSS 1% CVSS 8.8
HIGH This Week

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass M11Sdv 4C Ln4F Firmware M11Sdv 4Ct Ln4F Firmware +354
NVD VulDB
EPSS 1% CVSS 8.8
HIGH This Week

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure M11Sdv 4C Ln4F Firmware M11Sdv 4Ct Ln4F Firmware +354
NVD VulDB
EPSS 1% CVSS 7.5
HIGH This Week

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

X11Ssl Cf Firmware X11Dac Firmware X11Dai N Firmware +354
NVD VulDB
EPSS 0% CVSS 7.8
HIGH This Week

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow X12Dai N6 Firmware +270
NVD
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection H12Dst B Firmware X13Dai T Firmware +163
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy