CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
70.2%
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
Vendor | Product | Version | CPE |
---|---|---|---|
supermicro | smt_x9_firmware | * | cpe:2.3:o:supermicro:smt_x9_firmware:*:*:*:*:*:*:*:* |
supermicro | sh7758 | - | cpe:2.3:h:supermicro:sh7758:-:*:*:*:*:*:*:* |
supermicro | smt_x8_firmware | * | cpe:2.3:o:supermicro:smt_x8_firmware:*:*:*:*:*:*:*:* |
supermicro | sh7757 | - | cpe:2.3:h:supermicro:sh7757:-:*:*:*:*:*:*:* |
citrix | netscaler_sdx_firmware | 10 | cpe:2.3:o:citrix:netscaler_sdx_firmware:10:*:*:*:*:*:*:* |
citrix | netscaler_sdx | - | cpe:2.3:h:citrix:netscaler_sdx:-:*:*:*:*:*:*:* |
citrix | netscaler_firmware | - | cpe:2.3:o:citrix:netscaler_firmware:-:*:*:*:*:*:*:* |
citrix | netscaler | - | cpe:2.3:h:citrix:netscaler:-:*:*:*:*:*:*:* |
citrix | netscaler_sd-wan_firmware | - | cpe:2.3:o:citrix:netscaler_sd-wan_firmware:-:*:*:*:*:*:*:* |
citrix | netscaler_sd-wan | - | cpe:2.3:h:citrix:netscaler_sd-wan:-:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
70.2%