PT-2023-11794 · Bmc · Bmc Patrol Agent

Name of the Vulnerable Software and Affected Versions: BMC PATROL Agent versions prior to 20.08.00 Description: The issue allows local privilege escalation via vectors involving pconfig and the +RESTART -host options. Recommendations: For versions prior to 20.08.00, update to version 20.08.00 or...

CVE-2020-35593

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host...

CVE-2017-9453

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

CVE-2020-35593

Vulnerability summary (CVE-2020-35593) : BMC PATROL Agent (versions prior to 20.08.00) is affected by a local privilege escalation. The issue arises from vectors involving the internal use of pconfig with the +RESTART -host options, enabling a user with low privileges to escalate to higher privil...

CVE-2017-9453

CVE-2017-9453 affects BMC Server Automation prior to 8.9.01 patch 1. The root cause is an authentication bypass that enables the Process Spawner to execute commands, leading to potential remote compromise. The impact is reported as high/critical, with CVSS metrics indicating remote access without...

The vulnerability of the microprogramming software used by the embedded video driver on the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in an uncontrolled search path element, allowing a hacker to execute arbitrary code.

The vulnerability of the microprogramming software integrated into the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in its uncontrolled search path mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2023-5859 · Supermicro · Supermicro X11Sse-F +2

Name of the Vulnerable Software and Affected Versions: Supermicro X11SSM-F, X11SAE-F, and X11SSE-F versions 1.66 Supermicro BMC versions 8.3 through 9.6 Description: A command injection issue was discovered, allowing an attacker to elevate privileges from a user with BMC administrative privileges...

PT-2023-5860 · Microsoft +1 · Internet Explorer 11 +2

Name of the Vulnerable Software and Affected Versions: Supermicro X11 series versions 1.66 Description: The issue exists due to a lack of protection for the web page structure in the web interface of Supermicro X11 series BMC IPMI servers. This allows a remote attacker to conduct a cross-site...

PT-2023-5856 · Supermicro · Supermicro X11Sse-F +1

Name of the Vulnerable Software and Affected Versions: Supermicro X11SSM-F version 1.66 Supermicro X11SAE-F version 1.66 Supermicro X11SSE-F version 1.66 Description: An issue exists in the web interface of Supermicro X11 series BMC IPMI servers due to inadequate protection of the web page...

CVE-2023-34355

Uncontrolled search path element for some IntelR Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34355

Uncontrolled search path element for some IntelR Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34355

The CVE-2023-34355 issue affects Intel Server Board M10JNP2SB BMC Video Drivers. Affected components are the Integrated BMC Video Driver for Windows (pre-3.0) and Linux (pre-1.13.4). The root cause is an uncontrolled search path element, which may allow an authenticated local user to escalate pri...

CVE-2023-34355

Uncontrolled search path element for some IntelR Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Server Board BMC Video Driver Advisory

Summary: A potential security vulnerability in some Intel® Server Board BMC video drivers may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-34355 Description: Uncontrolled search path element for some...

PT-2023-4411 · Intel · Intel Server Board M10Jnp2Sb Bmc Video Driver

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux Description: The issue is related to an uncontrolled search path...

CVE-2023-39122

BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 and is also fixed by a patch for 9.0.20.200...

CVE-2023-39122

BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 and is also fixed by a patch for 9.0.20.200...

Sql injection

BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 and is also fixed by a patch for 9.0.20.200...

CVE-2023-35861

A shell-injection vulnerability in email notifications on Supermicro motherboards such as H12DST-B before 03.10.35 allows remote attackers to inject execute arbitrary commands as root on the BMC...

Sql injection

A shell-injection vulnerability in email notifications on Supermicro motherboards such as H12DST-B before 03.10.35 allows remote attackers to inject execute arbitrary commands as root on the BMC...