PT-2023-5858 · Supermicro · Supermicro X11 Series

Name of the Vulnerable Software and Affected Versions: Supermicro X11 series versions 1.66 Description: The issue exists due to the lack of protection for the web page structure in the web interface of Supermicro X11 series BMC IPMI servers. This allows a remote attacker to exploit an XSS issue a...

PT-2023-5860 · Microsoft +1 · Internet Explorer 11 +2

Name of the Vulnerable Software and Affected Versions: Supermicro X11 series versions 1.66 Description: The issue exists due to a lack of protection for the web page structure in the web interface of Supermicro X11 series BMC IPMI servers. This allows a remote attacker to conduct a cross-site...

PT-2023-5859 · Supermicro · Supermicro X11Sse-F +2

Name of the Vulnerable Software and Affected Versions: Supermicro X11SSM-F, X11SAE-F, and X11SSE-F versions 1.66 Supermicro BMC versions 8.3 through 9.6 Description: A command injection issue was discovered, allowing an attacker to elevate privileges from a user with BMC administrative privileges...

PT-2023-5854 · Supermicro · Supermicro X11Sse-F +1

Name of the Vulnerable Software and Affected Versions: Supermicro X11SSM-F version 1.66 Supermicro X11SAE-F version 1.66 Supermicro X11SSE-F version 1.66 Description: An issue was discovered in the web interface of Supermicro X11 series devices, specifically X11SSM-F, X11SAE-F, and X11SSE-F, due ...

PT-2023-5856 · Supermicro · Supermicro X11Sse-F +1

Name of the Vulnerable Software and Affected Versions: Supermicro X11SSM-F version 1.66 Supermicro X11SAE-F version 1.66 Supermicro X11SSE-F version 1.66 Description: An issue exists in the web interface of Supermicro X11 series BMC IPMI servers due to inadequate protection of the web page...

PT-2023-5857 · Supermicro · Supermicro X11Sse-F +1

Name of the Vulnerable Software and Affected Versions: Supermicro X11SSM-F version 1.66 Supermicro X11SAE-F version 1.66 Supermicro X11SSE-F version 1.66 Description: An issue exists in the web interface of Supermicro X11 series BMC IPMI servers due to inadequate protection of the web page...

PT-2023-25034 · Supermicro · Supermicro Motherboard X12Dpg-Qr

Name of the Vulnerable Software and Affected Versions: Supermicro motherboard X12DPG-QR version 1.4b Description: The issue allows local attackers to hijack control flow via manipulation of the SmcSecurityEraseSetupVar variable, potentially enabling them to gain unauthorized access or control...

CVE-2021-25856

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

CVE-2021-25856

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

CVE-2021-25857

An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the fonttype parameter to setup.php...

Code injection

An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the fonttype parameter to setup.php...

Code injection

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

superMicro CMS Security Vulnerability

superMicro CMS is a website builder by Patrick Taylor, an individual developer. A security vulnerability exists in superMicro CMS version 3.11, which originates from an arbitrary file deletion vulnerability in the file images.php. The vulnerability can be exploited by an attacker to delete...

CVE-2021-25857

The CVE-2021-25857 issue affects pcmt superMicro-CMS version 3.11. An authenticated attacker can trigger arbitrary code execution via the font_type parameter in setup.php. Root cause and impact are described across multiple sources consistently, but no explicit remediation details (patch version ...

superMicro CMS Security Vulnerability

superMicro CMS is a website builder by Patrick Taylor, an individual developer. A security vulnerability exists in version 3.11 of superMicro CMS, which is caused by an arbitrary code execution vulnerability in the parameter fonttype of the file setup.php...

CVE-2021-25857

An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the fonttype parameter to setup.php...

CVE-2021-25856

An issue in pcmt superMicro-CMS version 3.11 allows attackers to delete files via a crafted image file in images.php . Root cause: an arbitrary file deletion vulnerability in the image handling logic. Impact: deletion of arbitrary files (as described in CVE-2021-25856); exploitation status is not...

PT-2023-12080 · Supermicro · Pcmt Supermicro-Cms

Name of the Vulnerable Software and Affected Versions: pcmt superMicro-CMS version 3.11 Description: An issue was discovered that allows attackers to delete files via a crafted image file in the images.php file. Recommendations: For pcmt superMicro-CMS version 3.11, consider restricting access to...

Vulnerability discovered in Supermicro BMC firmware

A vulnerability has been discovered in the Baseboard Management Controller BMC of Supermicro X12, X13, H12 and H13 systems. A malicious person with access to the data center, could exploit it to change arbitrary settings and thereby alter the operation of the Supermicro systems through the...

CVE-2023-35861

A shell-injection vulnerability in email notifications on Supermicro motherboards such as H12DST-B before 03.10.35 allows remote attackers to inject execute arbitrary commands as root on the BMC...