Directory traversal

2023-12-0718:15:00

PRIOn knowledge base

www.prio-n.com

web server

supermicro x11

supermicro m11

firmware

security vulnerability

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.1%

JSON

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.

CPENameOperatorVersion
b12dpe-6_firmwarele3.17.02
b12dpt-6_firmwarele3.17.02
b12spe-cpu-25g_firmwarele3.17.02
b13dee_firmwarele3.17.02
b13det_firmwarele3.17.02
b13see-cpu-25g_firmwarele3.17.02
b13seg_firmwarele3.17.02
c9x299-pg300_firmwarele3.17.02
c9x299-pg300f_firmwarele3.17.02
c9x299-pg_firmwarele3.17.02

Name	Operator	Version
b12dpe-6_firmware	le	3.17.02
b12dpt-6_firmware	le	3.17.02
b12spe-cpu-25g_firmware	le	3.17.02
b13dee_firmware	le	3.17.02
b13det_firmware	le	3.17.02
b13see-cpu-25g_firmware	le	3.17.02
b13seg_firmware	le	3.17.02
c9x299-pg300_firmware	le	3.17.02
c9x299-pg300f_firmware	le	3.17.02
c9x299-pg_firmware	le	3.17.02