CVE-2023-40285

CVE-2023-40285 affects Supermicro X11SSM-F, X11SAE-F, and X11SSE-F (Web/BMC IPMI interface). The issue is an XSS vulnerability in the web interface for firmware 1.66, caused by inadequate protection of the web page structure, enabling arbitrary JavaScript execution in the context of the logged-in...

CVE-2023-40290

CVE-2023-40290 affects Supermicro X11 series BMC IPMI web interface (X11SSM-F, X11SAE-F, X11SSE-F) on firmware version 1.66. Root cause: cross-site scripting (XSS) in the Web UI that, when using Internet Explorer 11 on Windows, allows an attacker to execute JavaScript in the context of the logged...

CVE-2023-40284

CVE-2023-40284 affects Supermicro X11SSM-F, X11SAE-F, and X11SSE-F with firmware 1.66. The connected documents describe a web‑interface XSS in the BMC IPMI web UI, enabling remote attackers to execute JavaScript in the context of the logged‑in BMC user. Some sources also describe potential broade...

CVE-2023-40286

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

The vulnerability in the web interface of Supermicro’s BMC IPMI servers allows a perpetrator to execute arbitrary commands.

The vulnerability of the BMC IPMI server web interface of Supermicro is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted request...

CVE-2023-33411

A web server in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive...

CVE-2023-33411

A web server in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive...

CVE-2023-33413

The configuration functionality in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands...

CVE-2023-33413

The configuration functionality in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands...

CVE-2023-33411

A web server in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive...

CVE-2023-33412

The web interface in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targetin...

CVE-2023-33412

The web interface in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targetin...

Directory traversal

A web server in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive...

PT-2023-8803

Name of the Vulnerable Software and Affected Versions Supermicro X11 and M11 based devices versions prior to 3.17.02 Description The web interface in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation allows remote authenticated users to execute...

CVE-2023-33412

The CVE-2023-33412 issue affects Supermicro X11 and M11-based devices with IPMI BMC. Firmware versions before 3.17.02 expose a vulnerability where remote authenticated users can execute arbitrary commands by sending crafted requests to vulnerable CGI endpoints. Impact is described as high for con...

Supermicro X11 Security Vulnerability

Supermicro X11 is a server motherboard from Supermicro Computer USA. A security vulnerability exists in the Supermicro X11 that originates from allowing an unauthenticated remote user to perform directory traversal, which could potentially disclose sensitive information...

CVE-2023-33411

A web server in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive...

CVE-2023-33411

CVE-2023-33411 impacts Supermicro X11 and M11 devices with firmware up to 3.17.02, where a web server in the IPMI BMC implementation allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information. Several connected sources corroborate the affected...

Supermicro X11 Security Vulnerability

Supermicro X11 is a server motherboard from Supermicro Computer USA. A security vulnerability exists in the Supermicro X11 that originates from allowing an authenticated remote user to execute arbitrary commands via a crafted request...

Supermicro X11 Security Vulnerability

Supermicro X11 is a server motherboard from Supermicro Computer USA. A security vulnerability exists in the Supermicro X11 that originates from allowing an authenticated remote user to execute arbitrary commands...