CVE-2023-34853

2023-08-2200:00:00

mitre

www.cve.org

buffer overflow

supermicro

x12dpg-qr

local attackers

control flow

smcsecurityerasesetupvar

vulnerability

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

References

www.supermicro.com/Bios/softfiles/17136/X12DPG-QR_1.4b_X1.02.61_SUM2.10.0.zip.

www.supermicro.com/en/support/security_BIOS_Aug_2023