Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allow remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC), as demonstrated by the (1) username or (2) password field in login.cgi.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-119,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x9dr7-tf+ | - |
| supermicro | x9drt-ibqf | - |
| supermicro | h8sml-7 | - |
| supermicro | x9dbu-3f | - |
| supermicro | x8dtu-6tf+ | - |
| supermicro | h8dgt-hlibqf | - |
| supermicro | h8sml-if | - |
| supermicro | x9drw-7tpf+ | - |
| supermicro | x9dr3-f | - |
| supermicro | x8dtl-3f | - |
| supermicro | x7spe-h-d525 | - |
| supermicro | x9drl-if | - |
| supermicro | x9drg-hf | - |
| supermicro | x9drw-3tf+ | - |
| supermicro | h8dgi-f | - |
| supermicro | x7spe-hf | - |
| supermicro | x9dbl-if | - |
| supermicro | x7spa-hf | - |
| supermicro | x9drd-7jln4f | - |
| supermicro | x9dre-tf+ | - |
| supermicro | x8sit-hf | - |
| supermicro | x9dbi-tpf | - |
| supermicro | h8dcl-6f | - |
| supermicro | x9scm-iif | - |
| supermicro | x9dax-if | - |
| supermicro | x9dre-ln4f | - |
| supermicro | x9dax-7tf | - |
| supermicro | x9dri-ln4f+ | - |
| supermicro | x9sbaa-f | - |
| supermicro | x9drt-h6f | - |
| supermicro | x8sil-f | - |
| supermicro | x9sce-f | - |
| supermicro | x9drff-itg+ | - |
| supermicro | x9dax-if-hft | - |
| supermicro | x9drt-ibff | - |
| supermicro | x9sci-ln4f | - |
| supermicro | x8dtu-ln4f+ | - |
| supermicro | x8si6-f | - |
| supermicro | x9srg-f | - |
| supermicro | x8dtl-if | - |
| supermicro | x9qri-f+ | - |
| supermicro | h8dgt-hlf | - |
| supermicro | x9drff-it+ | - |
| supermicro | x9drg-htf | - |
| supermicro | x9dax-7f | - |
| supermicro | x9db3-tpf | - |
| supermicro | x9drw-3ln4f+ | - |
| supermicro | x9srw-f | - |
| supermicro | x9dr7-ln4f-jbod | - |
| supermicro | x9qr7-tf-jbod | - |
| supermicro | x9sri-3f | - |
| supermicro | x9spu-f | - |
| supermicro | h8sml-i | - |
| supermicro | x9dax-itf | - |
| supermicro | x9srd-f | - |
| supermicro | x9dbu-if | - |
| supermicro | x9drd-7ln4f-jbod | - |
| supermicro | x8dtu-6f+-lr | - |
| supermicro | x9db3-f | - |
| supermicro | x9drff-7+ | - |
| supermicro | x9drh-7f | - |
| supermicro | x9drff-i+ | - |
| supermicro | x9dbl-3f | - |
| supermicro | x9drd-if | - |
| supermicro | x9drff | - |
| supermicro | x8sit-f | - |
| supermicro | x9drh-itf | - |
| supermicro | h8dct-hln4f | - |
| supermicro | x9drl-3f | - |
| supermicro | h8dgg-qf | - |
| supermicro | x9drg-hf+ | - |
| supermicro | h8sgl-f | - |
| supermicro | h8sml-7f | - |
| supermicro | x9sre-f | - |
| supermicro | x8dtl-6f | - |
| supermicro | x8siu-f | - |
| supermicro | x9drh-7tf | - |
| supermicro | x9drt-f | - |
| supermicro | x7spa-hf-d525 | - |
| supermicro | x9sri-f | - |
| supermicro | h8sme-f | - |
| supermicro | x9drff-7t+ | - |
| supermicro | x9drh-if | - |
| supermicro | x9srl-f | - |
| supermicro | h8dg6-f | - |
| supermicro | x9drff-7g+ | - |
| supermicro | x9qr7-tf+ | - |
| supermicro | x9sre-3f | - |
| supermicro | h8dct-hibqf | - |
| supermicro | x8sie-ln4f | - |
| supermicro | x9scff-f | - |
| supermicro | h8dcl-if | - |
| supermicro | x9dax-7f-hft | - |
| supermicro | x9scm-f | - |
| supermicro | x8dtn+-f | - |
| supermicro | x9dbi-f | - |
| supermicro | x8dtu-6f+ | - |
| supermicro | x8sie-f | - |
| supermicro | x9scl+-f | - |
| supermicro | h8dct-ibqf | - |
| supermicro | x9drt-h6ibff | - |
| supermicro | x8dtn+-f-lr | - |
| supermicro | x9drg-htf+ | - |
| supermicro | h8dgt-hf | - |
| supermicro | x9drw-itpf+ | - |
| supermicro | x9scd-f | - |
| supermicro | x8dtu-ln4f+-lr | - |
| supermicro | h8dgu-ln4f+ | - |
| supermicro | h8scm-f | - |
| supermicro | x8dtu-6tf+-lr | - |
| supermicro | x8sia-f | - |
| supermicro | x9qr7-tf | - |
| supermicro | h8dgu-f | - |
| supermicro | x9qri-f | - |
| supermicro | x9drt-h6ibqf | - |
| supermicro | x9drt-hf+ | - |
| supermicro | x9drd-7ln4f | - |
| supermicro | x9drfr | - |
| supermicro | x7spt-df-d525 | - |
| supermicro | x9drff-7tg+ | - |
| supermicro | x9dri-f | - |
| supermicro | x9drl-ef | - |
| supermicro | x9scl-f | - |
| supermicro | x9dr3-ln4f+ | - |
| supermicro | x7spt-df-d525+ | - |
| supermicro | h8dgt-hibqf | - |
| supermicro | x9drff-7 | - |
| supermicro | x9drff-ig+ | - |
| supermicro | x7spe-hf-d525 | - |
| supermicro | x9drx+-f | - |
| supermicro | x9dr7-ln4f | - |
| supermicro | x9sca-f | - |
| supermicro | x9drd-ef | - |
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-20,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x9dr7-tf+ | - |
| supermicro | x9drt-ibqf | - |
| supermicro | h8sml-7 | - |
| supermicro | x9dbu-3f | - |
| supermicro | x8dtu-6tf+ | - |
| supermicro | h8dgt-hlibqf | - |
| supermicro | h8sml-if | - |
| supermicro | x9drw-7tpf+ | - |
| supermicro | x9dr3-f | - |
| supermicro | x8dtl-3f | - |
| supermicro | x7spe-h-d525 | - |
| supermicro | x9drl-if | - |
| supermicro | x9drg-hf | - |
| supermicro | x9drw-3tf+ | - |
| supermicro | h8dgi-f | - |
| supermicro | x7spe-hf | - |
| supermicro | x9dbl-if | - |
| supermicro | x7spa-hf | - |
| supermicro | x9drd-7jln4f | - |
| supermicro | x9dre-tf+ | - |
| supermicro | x8sit-hf | - |
| supermicro | x9dbi-tpf | - |
| supermicro | h8dcl-6f | - |
| supermicro | x9scm-iif | - |
| supermicro | x9dax-if | - |
| supermicro | x9dre-ln4f | - |
| supermicro | x9dax-7tf | - |
| supermicro | x9dri-ln4f+ | - |
| supermicro | x9sbaa-f | - |
| supermicro | x9drt-h6f | - |
| supermicro | x8sil-f | - |
| supermicro | x9sce-f | - |
| supermicro | x9drff-itg+ | - |
| supermicro | x9dax-if-hft | - |
| supermicro | x9drt-ibff | - |
| supermicro | x9sci-ln4f | - |
| supermicro | x8dtu-ln4f+ | - |
| supermicro | x8si6-f | - |
| supermicro | x9srg-f | - |
| supermicro | x8dtl-if | - |
| supermicro | x9qri-f+ | - |
| supermicro | h8dgt-hlf | - |
| supermicro | x9drff-it+ | - |
| supermicro | x9drg-htf | - |
| supermicro | x9dax-7f | - |
| supermicro | x9db3-tpf | - |
| supermicro | x9drw-3ln4f+ | - |
| supermicro | x9srw-f | - |
| supermicro | x9dr7-ln4f-jbod | - |
| supermicro | x9qr7-tf-jbod | - |
| supermicro | x9sri-3f | - |
| supermicro | x9spu-f | - |
| supermicro | h8sml-i | - |
| supermicro | x9dax-itf | - |
| supermicro | x9srd-f | - |
| supermicro | x9dbu-if | - |
| supermicro | x9drd-7ln4f-jbod | - |
| supermicro | x8dtu-6f+-lr | - |
| supermicro | x9db3-f | - |
| supermicro | x9drff-7+ | - |
| supermicro | x9drh-7f | - |
| supermicro | x9drff-i+ | - |
| supermicro | x9dbl-3f | - |
| supermicro | x9drd-if | - |
| supermicro | x9drff | - |
| supermicro | x8sit-f | - |
| supermicro | x9drh-itf | - |
| supermicro | h8dct-hln4f | - |
| supermicro | x9drl-3f | - |
| supermicro | h8dgg-qf | - |
| supermicro | x9drg-hf+ | - |
| supermicro | h8sgl-f | - |
| supermicro | h8sml-7f | - |
| supermicro | x9sre-f | - |
| supermicro | x8dtl-6f | - |
| supermicro | x8siu-f | - |
| supermicro | x9drh-7tf | - |
| supermicro | x9drt-f | - |
| supermicro | x7spa-hf-d525 | - |
| supermicro | x9sri-f | - |
| supermicro | h8sme-f | - |
| supermicro | x9drff-7t+ | - |
| supermicro | x9drh-if | - |
| supermicro | x9srl-f | - |
| supermicro | h8dg6-f | - |
| supermicro | x9drff-7g+ | - |
| supermicro | x9qr7-tf+ | - |
| supermicro | x9sre-3f | - |
| supermicro | h8dct-hibqf | - |
| supermicro | x8sie-ln4f | - |
| supermicro | x9scff-f | - |
| supermicro | h8dcl-if | - |
| supermicro | x9dax-7f-hft | - |
| supermicro | x9scm-f | - |
| supermicro | x8dtn+-f | - |
| supermicro | x9dbi-f | - |
| supermicro | x8dtu-6f+ | - |
| supermicro | x8sie-f | - |
| supermicro | x9scl+-f | - |
| supermicro | h8dct-ibqf | - |
| supermicro | x9drt-h6ibff | - |
| supermicro | x8dtn+-f-lr | - |
| supermicro | x9drg-htf+ | - |
| supermicro | h8dgt-hf | - |
| supermicro | x9drw-itpf+ | - |
| supermicro | x9scd-f | - |
| supermicro | x8dtu-ln4f+-lr | - |
| supermicro | h8dgu-ln4f+ | - |
| supermicro | h8scm-f | - |
| supermicro | x8dtu-6tf+-lr | - |
| supermicro | x8sia-f | - |
| supermicro | x9qr7-tf | - |
| supermicro | h8dgu-f | - |
| supermicro | x9qri-f | - |
| supermicro | x9drt-h6ibqf | - |
| supermicro | x9drt-hf+ | - |
| supermicro | x9drd-7ln4f | - |
| supermicro | x9drfr | - |
| supermicro | x7spt-df-d525 | - |
| supermicro | x9drff-7tg+ | - |
| supermicro | x9dri-f | - |
| supermicro | x9drl-ef | - |
| supermicro | x9scl-f | - |
| supermicro | x9dr3-ln4f+ | - |
| supermicro | x7spt-df-d525+ | - |
| supermicro | h8dgt-hibqf | - |
| supermicro | x9drff-7 | - |
| supermicro | x9drff-ig+ | - |
| supermicro | x7spe-hf-d525 | - |
| supermicro | x9drx+-f | - |
| supermicro | x9dr7-ln4f | - |
| supermicro | x9sca-f | - |
| supermicro | x9drd-ef | - |
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices relies on JavaScript code on the client for authorization checks, which allows remote authenticated users to bypass intended access restrictions via a crafted request, related to the PrivilegeCallBack function.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-20,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x9dr7-tf+ | - |
| supermicro | x9drt-ibqf | - |
| supermicro | h8sml-7 | - |
| supermicro | x9dbu-3f | - |
| supermicro | x8dtu-6tf+ | - |
| supermicro | h8dgt-hlibqf | - |
| supermicro | h8sml-if | - |
| supermicro | x9drw-7tpf+ | - |
| supermicro | x9dr3-f | - |
| supermicro | x8dtl-3f | - |
| supermicro | x7spe-h-d525 | - |
| supermicro | x9drl-if | - |
| supermicro | x9drg-hf | - |
| supermicro | x9drw-3tf+ | - |
| supermicro | h8dgi-f | - |
| supermicro | x7spe-hf | - |
| supermicro | x9dbl-if | - |
| supermicro | x7spa-hf | - |
| supermicro | x9drd-7jln4f | - |
| supermicro | x9dre-tf+ | - |
| supermicro | x8sit-hf | - |
| supermicro | x9dbi-tpf | - |
| supermicro | h8dcl-6f | - |
| supermicro | x9scm-iif | - |
| supermicro | x9dax-if | - |
| supermicro | x9dre-ln4f | - |
| supermicro | x9dax-7tf | - |
| supermicro | x9dri-ln4f+ | - |
| supermicro | x9sbaa-f | - |
| supermicro | x9drt-h6f | - |
| supermicro | x8sil-f | - |
| supermicro | x9sce-f | - |
| supermicro | x9drff-itg+ | - |
| supermicro | x9dax-if-hft | - |
| supermicro | x9drt-ibff | - |
| supermicro | x9sci-ln4f | - |
| supermicro | x8dtu-ln4f+ | - |
| supermicro | x8si6-f | - |
| supermicro | x9srg-f | - |
| supermicro | x8dtl-if | - |
| supermicro | x9qri-f+ | - |
| supermicro | h8dgt-hlf | - |
| supermicro | x9drff-it+ | - |
| supermicro | x9drg-htf | - |
| supermicro | x9dax-7f | - |
| supermicro | x9db3-tpf | - |
| supermicro | x9drw-3ln4f+ | - |
| supermicro | x9srw-f | - |
| supermicro | x9dr7-ln4f-jbod | - |
| supermicro | x9qr7-tf-jbod | - |
| supermicro | x9sri-3f | - |
| supermicro | x9spu-f | - |
| supermicro | h8sml-i | - |
| supermicro | x9dax-itf | - |
| supermicro | x9srd-f | - |
| supermicro | x9dbu-if | - |
| supermicro | x9drd-7ln4f-jbod | - |
| supermicro | x8dtu-6f+-lr | - |
| supermicro | x9db3-f | - |
| supermicro | x9drff-7+ | - |
| supermicro | x9drh-7f | - |
| supermicro | x9drff-i+ | - |
| supermicro | x9dbl-3f | - |
| supermicro | x9drd-if | - |
| supermicro | x9drff | - |
| supermicro | x8sit-f | - |
| supermicro | x9drh-itf | - |
| supermicro | h8dct-hln4f | - |
| supermicro | x9drl-3f | - |
| supermicro | h8dgg-qf | - |
| supermicro | x9drg-hf+ | - |
| supermicro | h8sgl-f | - |
| supermicro | h8sml-7f | - |
| supermicro | x9sre-f | - |
| supermicro | x8dtl-6f | - |
| supermicro | x8siu-f | - |
| supermicro | x9drh-7tf | - |
| supermicro | x9drt-f | - |
| supermicro | x7spa-hf-d525 | - |
| supermicro | x9sri-f | - |
| supermicro | h8sme-f | - |
| supermicro | x9drff-7t+ | - |
| supermicro | x9drh-if | - |
| supermicro | x9srl-f | - |
| supermicro | h8dg6-f | - |
| supermicro | x9drff-7g+ | - |
| supermicro | x9qr7-tf+ | - |
| supermicro | x9sre-3f | - |
| supermicro | h8dct-hibqf | - |
| supermicro | x8sie-ln4f | - |
| supermicro | x9scff-f | - |
| supermicro | h8dcl-if | - |
| supermicro | x9dax-7f-hft | - |
| supermicro | x9scm-f | - |
| supermicro | x8dtn+-f | - |
| supermicro | x9dbi-f | - |
| supermicro | x8dtu-6f+ | - |
| supermicro | x8sie-f | - |
| supermicro | x9scl+-f | - |
| supermicro | h8dct-ibqf | - |
| supermicro | x9drt-h6ibff | - |
| supermicro | x8dtn+-f-lr | - |
| supermicro | x9drg-htf+ | - |
| supermicro | h8dgt-hf | - |
| supermicro | x9drw-itpf+ | - |
| supermicro | x9scd-f | - |
| supermicro | x8dtu-ln4f+-lr | - |
| supermicro | h8dgu-ln4f+ | - |
| supermicro | h8scm-f | - |
| supermicro | x8dtu-6tf+-lr | - |
| supermicro | x8sia-f | - |
| supermicro | x9qr7-tf | - |
| supermicro | h8dgu-f | - |
| supermicro | x9qri-f | - |
| supermicro | x9drt-h6ibqf | - |
| supermicro | x9drt-hf+ | - |
| supermicro | x9drd-7ln4f | - |
| supermicro | x9drfr | - |
| supermicro | x7spt-df-d525 | - |
| supermicro | x9drff-7tg+ | - |
| supermicro | x9dri-f | - |
| supermicro | x9drl-ef | - |
| supermicro | x9scl-f | - |
| supermicro | x9dr3-ln4f+ | - |
| supermicro | x7spt-df-d525+ | - |
| supermicro | h8dgt-hibqf | - |
| supermicro | x9drff-7 | - |
| supermicro | x9drff-ig+ | - |
| supermicro | x7spe-hf-d525 | - |
| supermicro | x9drx+-f | - |
| supermicro | x9dr7-ln4f | - |
| supermicro | x9sca-f | - |
| supermicro | x9drd-ef | - |
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.1 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | 2.2 | 5.9 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-798,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | smt_x8_firmware | * |
| supermicro | smt_x9_firmware | * |
| citrix | netscaler_sd-wan_firmware | - |
| citrix | netscaler_sdx_firmware | 10 |
| citrix | netscaler_firmware | - |
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 3.9 | 3.6 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-522,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | smt_x8_firmware | * |
| supermicro | smt_x9_firmware | * |
| citrix | netscaler_sd-wan_firmware | - |
| citrix | netscaler_sdx_firmware | 10 |
| citrix | netscaler_firmware | - |
Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-119,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | intelligent_platform_management_firmware | * |
| supermicro | intelligent_platform_management_firmware | 2.24 |
Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1) sess_sid or (2) ACT parameter.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-119,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | intelligent_platform_management_firmware | * |
| supermicro | intelligent_platform_management_firmware | 2.24 |
The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-287,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | bmc | * |
Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 4.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | 2.8 | 1.4 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-22,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | intelligent_platform_management_interface | * |
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
CVSS 2.0
Severity: HIGH
Problem Type: NVD-CWE-noinfo,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x10dsn_firmware | - |
| supermicro | x8sil_firmware | - |
| supermicro | x10sde_firmware | - |
| supermicro | c7z170o_firmware | - |
| supermicro | k1spes_firmware | - |
| supermicro | a1sa_firmware | - |
| supermicro | b1dri_firmware | - |
| supermicro | x10drgo_firmware | - |
| supermicro | x10srg_firmware | - |
| supermicro | x10drth_firmware | - |
| supermicro | x10drg_firmware | - |
| supermicro | b10drt_firmware | - |
| supermicro | x9dbl_firmware | - |
| supermicro | x10sra_firmware | - |
| supermicro | c7z270p_firmware | - |
| supermicro | x10sri_firmware | - |
| supermicro | x9drf_firmware | - |
| supermicro | x9drth_firmware | - |
| supermicro | x10drx_firmware | - |
| supermicro | c7z370l_firmware | - |
| supermicro | x10srm_firmware | - |
| supermicro | x10drff_firmware | - |
| supermicro | b1sa4_firmware | - |
| supermicro | x10drs_firmware | - |
| supermicro | x10dsc_firmware | - |
| supermicro | x10drc_firmware | - |
| supermicro | x10drw_firmware | - |
| supermicro | x11ssv_firmware | - |
| supermicro | x11ssn_firmware | - |
| supermicro | x10srl_firmware | - |
| supermicro | c7q270_firmware | - |
| supermicro | c7x99oc_firmware | - |
| supermicro | x10dscp_firmware | - |
| supermicro | x9drffp_firmware | - |
| supermicro | x10sdvt_firmware | - |
| supermicro | x10dai_firmware | - |
| supermicro | x10drtb_firmware | - |
| supermicro | c7z87oc_firmware | - |
| supermicro | x10dgo_firmware | - |
| supermicro | x11sae_m_firmware | - |
| supermicro | x10drwn_firmware | - |
| supermicro | x10drh_firmware | - |
| supermicro | x10dali_firmware | - |
| supermicro | x8sia_firmware | - |
| supermicro | c7z97oc_firmware | - |
| supermicro | c7z270cg_firmware | - |
| supermicro | x11ssql_firmware | - |
| supermicro | x10drl_firmware | - |
| supermicro | x10sdvf_firmware | - |
| supermicro | c7z270l_firmware | - |
| supermicro | x10drdl_firmware | - |
| supermicro | x10srh_firmware | - |
| supermicro | b10dri_firmware | - |
| supermicro | a1sai1_firmware | - |
| supermicro | x11srm_firmware | - |
| supermicro | b1sd2tf_firmware | - |
| supermicro | x10drh4_firmware | - |
| supermicro | c7z170oce_firmware | - |
| supermicro | a1srm_firmware | - |
| supermicro | x10drlc_firmware | - |
| supermicro | x11sae_firmware | - |
| supermicro | x10drgh_firmware | - |
| supermicro | x10ddwn_firmware | - |
| supermicro | x9sae_firmware | - |
| supermicro | c7b250_firmware | - |
| supermicro | c7z270m_firmware | - |
| supermicro | x11sba_firmware | - |
| supermicro | x10sddf_firmware | - |
| supermicro | c7z270c_firmware | - |
| supermicro | c7z97mf_firmware | - |
| supermicro | c7z370i_firmware | - |
| supermicro | x10drtl_firmware | - |
| supermicro | x10drln_firmware | - |
| supermicro | x10dax_firmware | - |
| supermicro | k1spi_firmware | - |
| supermicro | x10drt_firmware | - |
| supermicro | x10dal_firmware | - |
| supermicro | x10drtps_firmware | - |
| supermicro | x10drul_firmware | - |
| supermicro | a1sam_firmware | - |
| supermicro | x10drfr_firmware | - |
| supermicro | x10ddwi_firmware | - |
| supermicro | x10qrh_firmware | - |
| supermicro | a2sav_firmware | - |
| supermicro | x10drts_firmware | - |
| supermicro | x9drgqf_firmware | - |
| supermicro | x8sie_firmware | - |
| supermicro | x10drd_firmware | - |
| supermicro | x10drux_firmware | - |
| supermicro | x8sit_firmware | - |
| supermicro | x10drfg_firmware | - |
| supermicro | c9x299_firmware | - |
| supermicro | x11sat_firmware | - |
| supermicro | c7h270_firmware | - |
| supermicro | x10srw_firmware | - |
| supermicro | x11ssq_firmware | - |
| supermicro | x10srd_firmware | - |
| supermicro | x11sra_firmware | - |
| supermicro | x10dru_firmware | - |
| supermicro | a2sap_firmware | - |
| supermicro | a1sai_firmware | - |
| supermicro | x10ddw3_firmware | - |
| supermicro | x11ssz_firmware | - |
| supermicro | c7z170_firmware | - |
| supermicro | x10ddw4_firmware | - |
| supermicro | a2san_firmware | - |
| supermicro | x10sba_firmware | - |
| supermicro | x8siu_firmware | - |
| supermicro | x10dri1_firmware | - |
| supermicro | b10drg_firmware | - |
Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-306,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | superdoctor_5 | - |
On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to the server managed by the BMC.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 10.0 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 3.9 | 6.0 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-287,CWE-326,CWE-522,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11ssw-f_firmware | 1.71.5 |
| supermicro | x11sch-ln4f_firmware | 1.23.2 |
| supermicro | x10sll-f_firmware | 3.83 |
| supermicro | x10drl-it_firmware | 3.83 |
| supermicro | x9drg-h(t)f+ii_firmware | 3.3 |
| supermicro | x10sdv-2c-7tp4f_firmware | 3.83 |
| supermicro | x10drd-intp_firmware | 3.83 |
| supermicro | x10drfr-t_firmware | 3.83 |
| supermicro | a1srm-2558f_firmware | 3.83 |
| supermicro | x9dai_firmware | 3.3 |
| supermicro | b2ss1-cpu_firmware | 3.68 |
| supermicro | x10drt-pibq_firmware | 3.83 |
| supermicro | x9dr3/i-ln4f+_firmware | 3.3 |
| supermicro | x11ssh-gf-1585_firmware | 1.56 |
| supermicro | b1sd1-16c-tf_firmware | 3.68 |
| supermicro | x11srl-f_firmware | 3.74.2 |
| supermicro | x11ssh-gf-1585l_firmware | 1.56 |
| supermicro | x11sdd-8c-f_firmware | 3.68 |
| supermicro | x9drl-7/ef_firmware | 3.3 |
| supermicro | x10slm+-f_firmware | 3.83 |
| supermicro | x10sdv-6c+-tln4f_firmware | 3.83 |
| supermicro | a1sai-2750f_firmware | 3.83 |
| supermicro | x10slh-f_firmware | 3.83 |
| supermicro | x9drff(-7)_firmware | 3.3 |
| supermicro | x10sdv-12c-tln4f_firmware | 3.83 |
| supermicro | x11dph-tq_firmware | 1.71.5 |
| supermicro | x11sca_firmware | 1.71.5 |
| supermicro | x11spw-ctf_firmware | 1.71.6 |
| supermicro | x10dri_firmware | 3.83 |
| supermicro | b11spe-cpu-tf_firmware | 3.68 |
| supermicro | b11dpt_firmware | 3.68 |
| supermicro | x10sll+-f_firmware | 3.83 |
| supermicro | x10sdv-12c+-tln4f_firmware | 3.83 |
| supermicro | m11sdv-8c-ln4f_firmware | 3.15 |
| supermicro | x11spl-f_firmware | 1.71.6 |
| supermicro | a1sai-2550f_firmware | 3.83 |
| supermicro | b9drg-3m_firmware | 3.3 |
| supermicro | b10drt-tp_firmware | 3.68 |
| supermicro | x11dpu-xll_firmware | 1.71.5 |
| supermicro | b1sd1-tf_firmware | 3.68 |
| supermicro | x9dr7-jln4f_firmware | 3.3 |
| supermicro | x9drd-7ln4f_series_firmware | 3.3 |
| supermicro | x10drw-n_firmware | 3.83 |
| supermicro | x11sca-f_firmware | 1.71.5 |
| supermicro | x11spg-tf_firmware | 1.71.6 |
| supermicro | b9dri_firmware | 3.3 |
| supermicro | b10drc-n_firmware | 3.68 |
| supermicro | x9dbu-3/if_firmware | 3.3 |
| supermicro | x10drff-ig_firmware | 3.83 |
| supermicro | x9qri-f_firmware | 3.3 |
| supermicro | x10drh-ct_firmware | 3.83 |
| supermicro | x11dgq_firmware | 1.71.5 |
| supermicro | b9drp_firmware | 3.3 |
| supermicro | x9drd-ef_firmware | 3.3 |
| supermicro | x10dgo-t_firmware | 3.83 |
| supermicro | x10sl7-f_firmware | 3.83 |
| supermicro | x11scm-ln8f_firmware | 1.23.2 |
| supermicro | x10dri-t4+_firmware | 3.83 |
| supermicro | x10qrh+_firmware | 3.80 |
| supermicro | x11spm-tf_firmware | 1.71.6 |
| supermicro | x11dsc+_firmware | 1.74 |
| supermicro | x11ssh-gtf-1585_firmware | 1.56 |
| supermicro | x11dpi-n_firmware | 1.71.5 |
| supermicro | a1srm-ln5f-2358_firmware | 3.83 |
| supermicro | x11dac_firmware | 1.71.5 |
| supermicro | x11ssw-tf_firmware | 1.56 |
| supermicro | x10sdv-6c-tln4f_firmware | 3.83 |
| supermicro | x11sph-nctf_firmware | 1.71.6 |
| supermicro | m11sdv-8ct-ln4f_firmware | 3.15 |
| supermicro | x10drd-i_firmware | 3.83 |
| supermicro | m11sdv-4ct-ln4f_firmware | 3.15 |
| supermicro | x10srh-cln4f_firmware | 3.83 |
| supermicro | x10drw-et_firmware | 3.83 |
| supermicro | x11sdd-18c-f_firmware | 3.68 |
| supermicro | x10drl-ct_firmware | 3.83 |
| supermicro | x11dpg-sn_firmware | 1.71.5 |
| supermicro | x10sde-df_firmware | 3.68 |
| supermicro | b10drg-ibf2_firmware | 3.68 |
| supermicro | m11sdv-8c+-ln4f_firmware | 3.15 |
| supermicro | x9drx+-f_firmware | 3.3 |
| supermicro | x10sri-f_firmware | 3.83 |
| supermicro | x10srg-f_firmware | 3.83 |
| supermicro | a1sri-2358f_firmware | 3.83 |
| supermicro | a1sam-2550f_firmware | 3.83 |
| supermicro | x9sra_firmware | 3.3 |
| supermicro | x11dph-i_firmware | 1.71.5 |
| supermicro | b2ss2-f_firmware | 3.68 |
| supermicro | x11dpg-ot-cpu_firmware | 1.71.5 |
| supermicro | x9drd-it+_firmware | 3.3 |
| supermicro | x9drt-h_series_firmware | 3.3 |
| supermicro | x9drg-h(t)f+_firmware | 3.3 |
| supermicro | x11dpfr-sn_firmware | 1.71.5 |
| supermicro | x10sdv-2c-tp4f_firmware | 3.83 |
| supermicro | x9srd-f_firmware | 3.3 |
| supermicro | x10dri-ln4+_firmware | 3.83 |
| supermicro | x11spm-tpf_firmware | 1.71.6 |
| supermicro | x11dpu-v_firmware | 1.71.5 |
| supermicro | x9drg-qf_firmware | 3.3 |
| supermicro | x10drg-ht_firmware | 3.83 |
| supermicro | x11ssh-ln4f_firmware | 1.56 |
| supermicro | x10drd-it_firmware | 3.83 |
| supermicro | b10drt-ibf2_firmware | 3.68 |
| supermicro | x10sdv-tp8f_firmware | 3.83 |
| supermicro | x10slm-f_firmware | 3.83 |
| supermicro | x11dpg-qt_firmware | 1.71.5 |
| supermicro | a1srm-ln7f-2358_firmware | 3.83 |
| supermicro | x11sds-12c_firmware | 3.74.2 |
| supermicro | x10slx-f_firmware | 3.83 |
| supermicro | b1sd2-tf_firmware | 3.68 |
| supermicro | x10sdv-4c-tln4f_firmware | 3.83 |
| supermicro | x10drt-pibf_firmware | 3.83 |
| supermicro | b10dri_firmware | 3.68 |
| supermicro | x10srl-f_firmware | 3.83 |
| supermicro | x10sdd-f_firmware | 3.68 |
| supermicro | x10sle-df_firmware | 3.83 |
| supermicro | b10drt-ibf_firmware | 3.68 |
| supermicro | x9drl-3/if_firmware | 3.3 |
| supermicro | x9drw-7/itpf+_firmware | 3.3 |
| supermicro | x11dps-re_firmware | 1.71.5 |
| supermicro | x11dsf-e_firmware | 1.71.5 |
| supermicro | x10qbl_firmware | 3.80 |
| supermicro | x10drx_firmware | 3.83 |
| supermicro | x11dsn-ts_firmware | 1.71.5 |
| supermicro | x11scm-f_firmware | 1.23.2 |
| supermicro | x11sph-nctpf_firmware | 1.71.6 |
| supermicro | x10drfr_firmware | 3.83 |
| supermicro | x10sdv-8c-tln4f_firmware | 3.83 |
| supermicro | x11ssh-gtf-1585l_firmware | 1.56 |
| supermicro | x9da7/e_firmware | 3.3 |
| supermicro | x10sdv-2c-tp8f_firmware | 3.83 |
| supermicro | x11dai-n_firmware | 1.71.5 |
| supermicro | x10drt-libq_firmware | 3.83 |
| supermicro | x11ssl-nf_firmware | 1.56 |
| supermicro | x10drff_firmware | 3.83 |
| supermicro | x10drw-nt_firmware | 3.83 |
| supermicro | x10drt-hibf_firmware | 3.83 |
| supermicro | x10slm+-ln4f_firmware | 3.83 |
| supermicro | b10dri-n_firmware | 3.68 |
| supermicro | x9dbs-f(-2u)_firmware | 3.3 |
| supermicro | x9dax-7/if-hft_firmware | 3.3 |
| supermicro | x10dgq_firmware | 3.83 |
| supermicro | x9drw-3ln4f+/3tf+_firmware | 3.3 |
| supermicro | x9srh-7(t)f_firmware | 3.3 |
| supermicro | x11ddw-nt_firmware | 1.71.5 |
| supermicro | m11sdv-4c-ln4f_firmware | 3.15 |
| supermicro | x9dax-7/i(t)f_firmware | 3.3 |
| supermicro | x10drl-ln4_firmware | 3.83 |
| supermicro | x10sdv-4c+-tln4f_firmware | 3.83 |
| supermicro | x11ssl-f_firmware | 1.56 |
| supermicro | a1sa2-2750f_firmware | 3.83 |
| supermicro | x9drg-h(t)f_firmware | 3.3 |
| supermicro | x9drw-7/itpf_firmware | 3.3 |
| supermicro | x10srw-f_firmware | 3.83 |
| supermicro | x11dpu-x_firmware | 1.71.5 |
| supermicro | x9drfr_firmware | 3.3 |
| supermicro | x10drh-iln4_firmware | 3.83 |
| supermicro | x9drw-3/if_firmware | 3.3 |
| supermicro | x11spa-t_firmware | 1.71.5 |
| supermicro | x10sdv-f_firmware | 3.83 |
| supermicro | x10sld-f_firmware | 3.83 |
| supermicro | x10drw-it_firmware | 3.83 |
| supermicro | x10sra-f_firmware | 3.83 |
| supermicro | x11spa-tf_firmware | 1.71.5 |
| supermicro | x11spm-f_firmware | 1.71.6 |
| supermicro | x10dru-xll_firmware | 3.83 |
| supermicro | x10sdv-16c-tln4f+_firmware | 3.83 |
| supermicro | x11dpu-ze+_firmware | 1.71.5 |
| supermicro | x9scd_series_firmware | 2.3 |
| supermicro | x10dri-t_firmware | 3.83 |
| supermicro | x11dpff-sn_firmware | 1.71.5 |
| supermicro | x11sri-if_firmware | 3.75.00 |
| supermicro | x10drd-ltp_firmware | 3.83 |
| supermicro | x9srl(-f)_firmware | 3.3 |
| supermicro | x9drff-7/i(t)g+_firmware | 3.3 |
| supermicro | x10dsn-ts_firmware | 3.83 |
| supermicro | x10sdv-4c-7tp4f_firmware | 3.83 |
| supermicro | x9dr7/e-tf+_firmware | 3.3 |
| supermicro | x10srm-f_firmware | 3.83 |
| supermicro | x9drff-7/i(t)+_firmware | 3.3 |
| supermicro | x10srd-f_firmware | 3.83 |
| supermicro | b10drt_firmware | 3.68 |
| supermicro | x10sdv-tln4f_firmware | 3.83 |
| supermicro | x11dpt-b_firmware | 1.71.5 |
| supermicro | x11dpi-nt_firmware | 1.71.5 |
| supermicro | x11ssi-ln4f_firmware | 1.71.5 |
| supermicro | x11sca-w_firmware | 1.71.5 |
| supermicro | x9qri-f+_firmware | 3.3 |
| supermicro | x10sll-sf_firmware | 3.83 |
| supermicro | x10qbl-4ct_firmware | 3.80 |
| supermicro | x10sdv-8c+-ln2f_firmware | 3.83 |
| supermicro | x9drd-l/if_firmware | 3.3 |
| supermicro | x9drh-7/i(t)f_firmware | 3.3 |
| supermicro | x9db3/i-(tp)f_firmware | 3.3 |
| supermicro | x10drt-libf_firmware | 3.83 |
| supermicro | x10drfr-nt_firmware | 3.83 |
| supermicro | x10dru-i+_firmware | 3.83 |
| supermicro | x9dr3/i-f_firmware | 3.3 |
| supermicro | x10sra_firmware | 3.83 |
| supermicro | b9qr7(-tp)_firmware | 3.3 |
| supermicro | a1sri-2558f_firmware | 3.83 |
| supermicro | b11dpe_firmware | 3.68 |
| supermicro | x10qbl-4_firmware | 3.80 |
| supermicro | x11ssd-f_firmware | 3.68 |
| supermicro | x10drh-c_firmware | 3.83 |
| supermicro | b2ss2-mtf_firmware | 3.68 |
| supermicro | x10drg-q_firmware | 3.83 |
| supermicro | b10drc_firmware | 3.68 |
| supermicro | x11scl-if_firmware | 1.23.2 |
| supermicro | x10drc-t4+_firmware | 3.83 |
| supermicro | x10drw-e_firmware | 3.83 |
| supermicro | x9dal-3/i_firmware | 3.3 |
| supermicro | x11dsn-tsq_firmware | 1.71.5 |
| supermicro | x10drg-ot+-cpu_firmware | 3.83 |
| supermicro | x10sle-hf_firmware | 3.83 |
| supermicro | x11ssm-f_firmware | 1.56 |
| supermicro | x11scw-f_firmware | 3.75.00 |
| supermicro | x10drs_firmware | 3.83 |
| supermicro | x9drw-c(t)f31_firmware | 3.3 |
| supermicro | x10sdv-7tp4f_firmware | 3.83 |
| supermicro | x10dru-x_firmware | 3.83 |
| supermicro | x11spw-tf_firmware | 1.71.6 |
| supermicro | x11sds-8c_firmware | 3.74.2 |
| supermicro | x10drl-i_firmware | 3.83 |
| supermicro | x10sld-hf_firmware | 3.83 |
| supermicro | x10ddw-in_firmware | 3.83 |
| supermicro | x11dpt-ps_firmware | 1.71.5 |
| supermicro | x10drt-b+_firmware | 3.83 |
| supermicro | x9sca(-f)_firmware | 2.3 |
| supermicro | x11dgo-t_firmware | 1.71.5 |
| supermicro | x9drt-p_series_firmware | 3.3 |
| supermicro | x10sdv-4c-tln2f_firmware | 3.83 |
| supermicro | x11sch-f_firmware | 1.23.2 |
| supermicro | b2ss1-h-mtf_firmware | 3.68 |
| supermicro | x10drd-l_firmware | 3.83 |
| supermicro | x10drff-ctg_firmware | 3.83 |
| supermicro | x10drc-ln4+_firmware | 3.83 |
| supermicro | x9scl(-f)_firmware | 2.3 |
| supermicro | x10sdv-7tp8f_firmware | 3.83 |
| supermicro | x9qr7-tf+_firmware | 3.3 |
| supermicro | x10qbl-ct_firmware | 3.80 |
| supermicro | x9srg-f_firmware | 3.3 |
| supermicro | x9drd-c(n)t+_firmware | 3.3 |
| supermicro | x11ssh-tf_firmware | 1.56 |
| supermicro | b2ss2-h-mtf_firmware | 3.68 |
| supermicro | x10dbt-t_firmware | 3.83 |
| supermicro | x11dpl-i_firmware | 1.71.5 |
| supermicro | x11ssh-ctf_firmware | 1.56 |
| supermicro | x9dbl-3/i(f)_firmware | 3.3 |
| supermicro | x10sae_firmware | 3.83 |
| supermicro | x11opi-cpu_firmware | 1.71.5 |
| supermicro | x11dph-t_firmware | 1.71.5 |
| supermicro | b1sd2-16c-tf_firmware | 3.68 |
| supermicro | b9drg_firmware | 3.3 |
| supermicro | b2ss1-mtf_firmware | 3.68 |
| supermicro | x11qph+_firmware | 1.71.5 |
| supermicro | x11dpt-bh_firmware | 1.71.5 |
| supermicro | x11sse-f_firmware | 3.68 |
| supermicro | x11sds-16c_firmware | 3.74.2 |
| supermicro | x10drt-pt_firmware | 3.83 |
| supermicro | x11ddw-l_firmware | 1.71.5 |
| supermicro | b2ss1-cf_firmware | 3.68 |
| supermicro | x11ssw-4tf_firmware | 1.56 |
| supermicro | x10drh-it_firmware | 3.83 |
| supermicro | x9drt_series_firmware | 3.3 |
| supermicro | x10drh-i_firmware | 3.83 |
| supermicro | a1sam-2750f_firmware | 3.83 |
| supermicro | x10sdv-4c+-tp4f_firmware | 3.83 |
| supermicro | x11scd-f_firmware | 3.68 |
| supermicro | x11ssl_firmware | 1.56 |
| supermicro | x10sle-f_firmware | 3.83 |
| supermicro | x9drh-if-nv_firmware | 3.3 |
| supermicro | x9sci-ln4(f)_firmware | 2.3 |
| supermicro | x10drl-c_firmware | 3.83 |
| supermicro | x10drd-int_firmware | 3.83 |
| supermicro | x10sdd-16c-f_firmware | 3.68 |
| supermicro | x11spi-tf_firmware | 1.71.6 |
| supermicro | x10drg-o+-cpu_firmware | 3.83 |
| supermicro | x10sdv-8c-tln4f+_firmware | 3.83 |
| supermicro | x10sdv-16c-tln4f_firmware | 3.83 |
| supermicro | x11scl-f_firmware | 1.23.2 |
| supermicro | b10drg-ibf_firmware | 3.68 |
| supermicro | x10drh-cln4_firmware | 3.83 |
| supermicro | x10drfr-n_firmware | 3.83 |
| supermicro | x10drt-p_firmware | 3.83 |
| supermicro | x10drw-i_firmware | 3.83 |
| supermicro | b9drt_firmware | 3.3 |
| supermicro | x10sat_firmware | 3.83 |
| supermicro | x9qr7-tf_firmware | 3.3 |
| supermicro | x10drd-lt_firmware | 3.83 |
| supermicro | x11ssw-f_firmware | 3.85.00 |
| supermicro | a1srm-2758f_firmware | 3.83 |
| supermicro | x10drff-cg_firmware | 3.83 |
| supermicro | x10ddw-i_firmware | 3.83 |
| supermicro | b11qpi_firmware | 3.68 |
| supermicro | x11ssl-cf_firmware | 1.56 |
| supermicro | x11dpu_firmware | 1.71.5 |
| supermicro | x9srw-f_firmware | 3.3 |
| supermicro | x9sae(-v)_firmware | 2.3 |
| supermicro | b11spe-cpu-25g_firmware | 3.68 |
| supermicro | x10sla-f_firmware | 3.83 |
| supermicro | x9drg-o(t)f-cpu_firmware | 3.3 |
| supermicro | x9dr7/e-ln4f_firmware | 3.3 |
| supermicro | x9drt-hf+_firmware | 3.3 |
| supermicro | b2ss1-f_firmware | 3.68 |
| supermicro | x11ssm_firmware | 1.56 |
| supermicro | x10drt-l_firmware | 3.83 |
| supermicro | x9scl+-f_firmware | 2.3 |
| supermicro | a1srm-ln7f-2758_firmware | 3.83 |
| supermicro | x10drg-h_firmware | 3.83 |
| supermicro | x10qbi_firmware | 3.81 |
| supermicro | b9dr7_firmware | 3.3 |
| supermicro | x11ssh-f_firmware | 1.56 |
| supermicro | x11dpu-z+_firmware | 1.71.5 |
| supermicro | x10drt-ps_firmware | 3.83 |
| supermicro | x11dpt-l_firmware | 3.74 |
| supermicro | x10drt-h_firmware | 3.83 |
| supermicro | x10drff-itg_firmware | 3.83 |
| supermicro | x10sdv-2c-tln2f_firmware | 3.83 |
| supermicro | x10drff-c_firmware | 3.83 |
| supermicro | x11scl-ln4f_firmware | 1.23.2 |
| supermicro | x10sdv-12c-tln4f+_firmware | 3.83 |
| supermicro | x11dpfr-s_firmware | 1.71.5 |
| supermicro | b10drg-tp_firmware | 3.68 |
| supermicro | a1sri-2758f_firmware | 3.83 |
| supermicro | x9sre/i_series_firmware | 3.3 |
| supermicro | x10obi-cpu_firmware | 3.83 |
| supermicro | x10sdv-16c+-tln4f_firmware | 3.83 |
| supermicro | b9drg-e_firmware | 3.3 |
| supermicro | x11srm-f_firmware | 1.31.1 |
| supermicro | x10sll-s_firmware | 3.83 |
| supermicro | x9scm(-f)_firmware | 2.3 |
| supermicro | x11dpx-t_firmware | 1.71.5 |
| supermicro | x10dsc+_firmware | 3.83 |
| supermicro | x10srm-tf_firmware | 3.83 |
| supermicro | x10srh-cf_firmware | 3.83 |
| supermicro | x10drd-itp_firmware | 3.83 |
| supermicro | x11srm-vf_firmware | 1.31.1 |
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the server managed by the BMC.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 10.0 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 3.9 | 6.0 |
CVSS 2.0
Severity: HIGH
Problem Type: NVD-CWE-noinfo,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11ssw-f_firmware | 1.71.5 |
| supermicro | x11sch-ln4f_firmware | 1.23.2 |
| supermicro | x10sll-f_firmware | 3.83 |
| supermicro | x10drl-it_firmware | 3.83 |
| supermicro | x10sdv-2c-7tp4f_firmware | 3.83 |
| supermicro | x10drd-intp_firmware | 3.83 |
| supermicro | x10drfr-t_firmware | 3.83 |
| supermicro | a1srm-2558f_firmware | 3.83 |
| supermicro | b2ss1-cpu_firmware | 3.68 |
| supermicro | x10drt-pibq_firmware | 3.83 |
| supermicro | x11ssh-gf-1585_firmware | 1.56 |
| supermicro | b1sd1-16c-tf_firmware | 3.68 |
| supermicro | x11srl-f_firmware | 3.74.2 |
| supermicro | x11ssh-gf-1585l_firmware | 1.56 |
| supermicro | x11sdd-8c-f_firmware | 3.68 |
| supermicro | x10slm+-f_firmware | 3.83 |
| supermicro | x10sdv-6c+-tln4f_firmware | 3.83 |
| supermicro | a1sai-2750f_firmware | 3.83 |
| supermicro | x10slh-f_firmware | 3.83 |
| supermicro | x10sdv-12c-tln4f_firmware | 3.83 |
| supermicro | x11dph-tq_firmware | 1.71.5 |
| supermicro | x11sca_firmware | 1.71.5 |
| supermicro | x11spw-ctf_firmware | 1.71.6 |
| supermicro | x10dri_firmware | 3.83 |
| supermicro | b11spe-cpu-tf_firmware | 3.68 |
| supermicro | b11dpt_firmware | 3.68 |
| supermicro | x10sll+-f_firmware | 3.83 |
| supermicro | x10sdv-12c+-tln4f_firmware | 3.83 |
| supermicro | x11spl-f_firmware | 1.71.6 |
| supermicro | a1sai-2550f_firmware | 3.83 |
| supermicro | b10drt-tp_firmware | 3.68 |
| supermicro | x11dpu-xll_firmware | 1.71.5 |
| supermicro | b1sd1-tf_firmware | 3.68 |
| supermicro | x10drw-n_firmware | 3.83 |
| supermicro | x11sca-f_firmware | 1.71.5 |
| supermicro | x11spg-tf_firmware | 1.71.6 |
| supermicro | b10drc-n_firmware | 3.68 |
| supermicro | x10drff-ig_firmware | 3.83 |
| supermicro | x10drh-ct_firmware | 3.83 |
| supermicro | x11dgq_firmware | 1.71.5 |
| supermicro | x10dgo-t_firmware | 3.83 |
| supermicro | x10sl7-f_firmware | 3.83 |
| supermicro | x11scm-ln8f_firmware | 1.23.2 |
| supermicro | x10dri-t4+_firmware | 3.83 |
| supermicro | x10qrh+_firmware | 3.80 |
| supermicro | x11spm-tf_firmware | 1.71.6 |
| supermicro | x11dsc+_firmware | 1.74 |
| supermicro | x11ssh-gtf-1585_firmware | 1.56 |
| supermicro | x11dpi-n_firmware | 1.71.5 |
| supermicro | a1srm-ln5f-2358_firmware | 3.83 |
| supermicro | x11dac_firmware | 1.71.5 |
| supermicro | x11ssw-tf_firmware | 1.56 |
| supermicro | x10sdv-6c-tln4f_firmware | 3.83 |
| supermicro | x11sph-nctf_firmware | 1.71.6 |
| supermicro | x10drd-i_firmware | 3.83 |
| supermicro | x10srh-cln4f_firmware | 3.83 |
| supermicro | x10drw-et_firmware | 3.83 |
| supermicro | x11sdd-18c-f_firmware | 3.68 |
| supermicro | x10drl-ct_firmware | 3.83 |
| supermicro | x11dpg-sn_firmware | 1.71.5 |
| supermicro | x10sde-df_firmware | 3.68 |
| supermicro | b10drg-ibf2_firmware | 3.68 |
| supermicro | x10sri-f_firmware | 3.83 |
| supermicro | x10srg-f_firmware | 3.83 |
| supermicro | a1sri-2358f_firmware | 3.83 |
| supermicro | a1sam-2550f_firmware | 3.83 |
| supermicro | x11dph-i_firmware | 1.71.5 |
| supermicro | b2ss2-f_firmware | 3.68 |
| supermicro | x11dpg-ot-cpu_firmware | 1.71.5 |
| supermicro | x11dpfr-sn_firmware | 1.71.5 |
| supermicro | x10sdv-2c-tp4f_firmware | 3.83 |
| supermicro | x10dri-ln4+_firmware | 3.83 |
| supermicro | x11spm-tpf_firmware | 1.71.6 |
| supermicro | x11dpu-v_firmware | 1.71.5 |
| supermicro | x10drg-ht_firmware | 3.83 |
| supermicro | x11ssh-ln4f_firmware | 1.56 |
| supermicro | x10drd-it_firmware | 3.83 |
| supermicro | b10drt-ibf2_firmware | 3.68 |
| supermicro | x10sdv-tp8f_firmware | 3.83 |
| supermicro | x10slm-f_firmware | 3.83 |
| supermicro | x11dpg-qt_firmware | 1.71.5 |
| supermicro | a1srm-ln7f-2358_firmware | 3.83 |
| supermicro | x11sds-12c_firmware | 3.74.2 |
| supermicro | x10slx-f_firmware | 3.83 |
| supermicro | b1sd2-tf_firmware | 3.68 |
| supermicro | x10sdv-4c-tln4f_firmware | 3.83 |
| supermicro | x10drt-pibf_firmware | 3.83 |
| supermicro | b10dri_firmware | 3.68 |
| supermicro | x10srl-f_firmware | 3.83 |
| supermicro | x10sdd-f_firmware | 3.68 |
| supermicro | x10sle-df_firmware | 3.83 |
| supermicro | b10drt-ibf_firmware | 3.68 |
| supermicro | x11dps-re_firmware | 1.71.5 |
| supermicro | x11dsf-e_firmware | 1.71.5 |
| supermicro | x10qbl_firmware | 3.80 |
| supermicro | x10drx_firmware | 3.83 |
| supermicro | x11dsn-ts_firmware | 1.71.5 |
| supermicro | x11scm-f_firmware | 1.23.2 |
| supermicro | x11sph-nctpf_firmware | 1.71.6 |
| supermicro | x10drfr_firmware | 3.83 |
| supermicro | x10sdv-8c-tln4f_firmware | 3.83 |
| supermicro | x11ssh-gtf-1585l_firmware | 1.56 |
| supermicro | x10sdv-2c-tp8f_firmware | 3.83 |
| supermicro | x11dai-n_firmware | 1.71.5 |
| supermicro | x10drt-libq_firmware | 3.83 |
| supermicro | x11ssl-nf_firmware | 1.56 |
| supermicro | x10drff_firmware | 3.83 |
| supermicro | x10drw-nt_firmware | 3.83 |
| supermicro | x10drt-hibf_firmware | 3.83 |
| supermicro | x10slm+-ln4f_firmware | 3.83 |
| supermicro | b10dri-n_firmware | 3.68 |
| supermicro | x10dgq_firmware | 3.83 |
| supermicro | x11ddw-nt_firmware | 1.71.5 |
| supermicro | x10drl-ln4_firmware | 3.83 |
| supermicro | x10sdv-4c+-tln4f_firmware | 3.83 |
| supermicro | x11ssl-f_firmware | 1.56 |
| supermicro | a1sa2-2750f_firmware | 3.83 |
| supermicro | x10srw-f_firmware | 3.83 |
| supermicro | x11dpu-x_firmware | 1.71.5 |
| supermicro | x10drh-iln4_firmware | 3.83 |
| supermicro | x11spa-t_firmware | 1.71.5 |
| supermicro | x10sdv-f_firmware | 3.83 |
| supermicro | x10sld-f_firmware | 3.83 |
| supermicro | x10drw-it_firmware | 3.83 |
| supermicro | x10sra-f_firmware | 3.83 |
| supermicro | x11spa-tf_firmware | 1.71.5 |
| supermicro | x11spm-f_firmware | 1.71.6 |
| supermicro | x10dru-xll_firmware | 3.83 |
| supermicro | x10sdv-16c-tln4f+_firmware | 3.83 |
| supermicro | x11dpu-ze+_firmware | 1.71.5 |
| supermicro | x10dri-t_firmware | 3.83 |
| supermicro | x11dpff-sn_firmware | 1.71.5 |
| supermicro | x11sri-if_firmware | 3.75.00 |
| supermicro | x10drd-ltp_firmware | 3.83 |
| supermicro | x10dsn-ts_firmware | 3.83 |
| supermicro | x10sdv-4c-7tp4f_firmware | 3.83 |
| supermicro | x10srm-f_firmware | 3.83 |
| supermicro | x10srd-f_firmware | 3.83 |
| supermicro | b10drt_firmware | 3.68 |
| supermicro | x10sdv-tln4f_firmware | 3.83 |
| supermicro | x11dpt-b_firmware | 1.71.5 |
| supermicro | x11dpi-nt_firmware | 1.71.5 |
| supermicro | x11ssi-ln4f_firmware | 1.71.5 |
| supermicro | x11sca-w_firmware | 1.71.5 |
| supermicro | x10sll-sf_firmware | 3.83 |
| supermicro | x10qbl-4ct_firmware | 3.80 |
| supermicro | x10sdv-8c+-ln2f_firmware | 3.83 |
| supermicro | x10drt-libf_firmware | 3.83 |
| supermicro | x10drfr-nt_firmware | 3.83 |
| supermicro | x10dru-i+_firmware | 3.83 |
| supermicro | x10sra_firmware | 3.83 |
| supermicro | a1sri-2558f_firmware | 3.83 |
| supermicro | b11dpe_firmware | 3.68 |
| supermicro | x10qbl-4_firmware | 3.80 |
| supermicro | x11ssd-f_firmware | 3.68 |
| supermicro | x10drh-c_firmware | 3.83 |
| supermicro | b2ss2-mtf_firmware | 3.68 |
| supermicro | x10drg-q_firmware | 3.83 |
| supermicro | b10drc_firmware | 3.68 |
| supermicro | x11scl-if_firmware | 1.23.2 |
| supermicro | x10drc-t4+_firmware | 3.83 |
| supermicro | x10drw-e_firmware | 3.83 |
| supermicro | x11dsn-tsq_firmware | 1.71.5 |
| supermicro | x10drg-ot+-cpu_firmware | 3.83 |
| supermicro | x10sle-hf_firmware | 3.83 |
| supermicro | x11ssm-f_firmware | 1.56 |
| supermicro | x11scw-f_firmware | 3.75.00 |
| supermicro | x10drs_firmware | 3.83 |
| supermicro | x10sdv-7tp4f_firmware | 3.83 |
| supermicro | x10dru-x_firmware | 3.83 |
| supermicro | x11spw-tf_firmware | 1.71.6 |
| supermicro | x11sds-8c_firmware | 3.74.2 |
| supermicro | x10drl-i_firmware | 3.83 |
| supermicro | x10sld-hf_firmware | 3.83 |
| supermicro | x10ddw-in_firmware | 3.83 |
| supermicro | x11dpt-ps_firmware | 1.71.5 |
| supermicro | x10drt-b+_firmware | 3.83 |
| supermicro | x11dgo-t_firmware | 1.71.5 |
| supermicro | x10sdv-4c-tln2f_firmware | 3.83 |
| supermicro | x11sch-f_firmware | 1.23.2 |
| supermicro | b2ss1-h-mtf_firmware | 3.68 |
| supermicro | x10drd-l_firmware | 3.83 |
| supermicro | x10drff-ctg_firmware | 3.83 |
| supermicro | x10drc-ln4+_firmware | 3.83 |
| supermicro | x10sdv-7tp8f_firmware | 3.83 |
| supermicro | x10qbl-ct_firmware | 3.80 |
| supermicro | x11ssh-tf_firmware | 1.56 |
| supermicro | b2ss2-h-mtf_firmware | 3.68 |
| supermicro | x10dbt-t_firmware | 3.83 |
| supermicro | x11dpl-i_firmware | 1.71.5 |
| supermicro | x11ssh-ctf_firmware | 1.56 |
| supermicro | x10sae_firmware | 3.83 |
| supermicro | x11opi-cpu_firmware | 1.71.5 |
| supermicro | x11dph-t_firmware | 1.71.5 |
| supermicro | b1sd2-16c-tf_firmware | 3.68 |
| supermicro | b2ss1-mtf_firmware | 3.68 |
| supermicro | x11qph+_firmware | 1.71.5 |
| supermicro | x11dpt-bh_firmware | 1.71.5 |
| supermicro | x11sse-f_firmware | 3.68 |
| supermicro | x11sds-16c_firmware | 3.74.2 |
| supermicro | x10drt-pt_firmware | 3.83 |
| supermicro | x11ddw-l_firmware | 1.71.5 |
| supermicro | b2ss1-cf_firmware | 3.68 |
| supermicro | x11ssw-4tf_firmware | 1.56 |
| supermicro | x10drh-it_firmware | 3.83 |
| supermicro | x10drh-i_firmware | 3.83 |
| supermicro | a1sam-2750f_firmware | 3.83 |
| supermicro | x10sdv-4c+-tp4f_firmware | 3.83 |
| supermicro | x11scd-f_firmware | 3.68 |
| supermicro | x11ssl_firmware | 1.56 |
| supermicro | x10sle-f_firmware | 3.83 |
| supermicro | x10drl-c_firmware | 3.83 |
| supermicro | x10drd-int_firmware | 3.83 |
| supermicro | x10sdd-16c-f_firmware | 3.68 |
| supermicro | x11spi-tf_firmware | 1.71.6 |
| supermicro | x10drg-o+-cpu_firmware | 3.83 |
| supermicro | x10sdv-8c-tln4f+_firmware | 3.83 |
| supermicro | x10sdv-16c-tln4f_firmware | 3.83 |
| supermicro | x11scl-f_firmware | 1.23.2 |
| supermicro | b10drg-ibf_firmware | 3.68 |
| supermicro | x10drh-cln4_firmware | 3.83 |
| supermicro | x10drfr-n_firmware | 3.83 |
| supermicro | x10drt-p_firmware | 3.83 |
| supermicro | x10drw-i_firmware | 3.83 |
| supermicro | x10sat_firmware | 3.83 |
| supermicro | x10drd-lt_firmware | 3.83 |
| supermicro | x11ssw-f_firmware | 3.85.00 |
| supermicro | a1srm-2758f_firmware | 3.83 |
| supermicro | x10drff-cg_firmware | 3.83 |
| supermicro | x10ddw-i_firmware | 3.83 |
| supermicro | b11qpi_firmware | 3.68 |
| supermicro | x11ssl-cf_firmware | 1.56 |
| supermicro | x11dpu_firmware | 1.71.5 |
| supermicro | b11spe-cpu-25g_firmware | 3.68 |
| supermicro | x10sla-f_firmware | 3.83 |
| supermicro | b2ss1-f_firmware | 3.68 |
| supermicro | x11ssm_firmware | 1.56 |
| supermicro | x10drt-l_firmware | 3.83 |
| supermicro | a1srm-ln7f-2758_firmware | 3.83 |
| supermicro | x10drg-h_firmware | 3.83 |
| supermicro | x10qbi_firmware | 3.81 |
| supermicro | x11ssh-f_firmware | 1.56 |
| supermicro | x11dpu-z+_firmware | 1.71.5 |
| supermicro | x10drt-ps_firmware | 3.83 |
| supermicro | x11dpt-l_firmware | 3.74 |
| supermicro | x10drt-h_firmware | 3.83 |
| supermicro | x10drff-itg_firmware | 3.83 |
| supermicro | x10sdv-2c-tln2f_firmware | 3.83 |
| supermicro | x10drff-c_firmware | 3.83 |
| supermicro | x11scl-ln4f_firmware | 1.23.2 |
| supermicro | x10sdv-12c-tln4f+_firmware | 3.83 |
| supermicro | x11dpfr-s_firmware | 1.71.5 |
| supermicro | b10drg-tp_firmware | 3.68 |
| supermicro | a1sri-2758f_firmware | 3.83 |
| supermicro | x10obi-cpu_firmware | 3.83 |
| supermicro | x10sdv-16c+-tln4f_firmware | 3.83 |
| supermicro | x11srm-f_firmware | 1.31.1 |
| supermicro | x10sll-s_firmware | 3.83 |
| supermicro | x11dpx-t_firmware | 1.71.5 |
| supermicro | x10dsc+_firmware | 3.83 |
| supermicro | x10srm-tf_firmware | 3.83 |
| supermicro | x10srh-cf_firmware | 3.83 |
| supermicro | x10drd-itp_firmware | 3.83 |
| supermicro | x11srm-vf_firmware | 1.31.1 |
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or ShareName. The attacker can achieve a persistent backdoor.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
CVSS 2.0
Severity: HIGH
Problem Type: CWE-78,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x8sti-f_firmware | 2.06 |
| supermicro | x8sti-f_bios | 02.68 |
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/config_user.cgi CSRF issue to add new admin users. The fixed versions are BIOS 3.2 and firmware 03.88.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
CVSS 2.0
Severity: HIGH
Problem Type: CWE-352,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x10drh-it_firmware | 3.40 |
| supermicro | x10drh-it_bios | 2.0a |
A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 2.3 | LOW | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N | 0.8 | 1.4 |
CVSS 2.0
Severity: LOW
Problem Type: CWE-506,NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x10sll-s_firmware | * |
| supermicro | x10sll+f_firmware | * |
| supermicro | x10sll-f_firmware | * |
| supermicro | x10slm+-f_firmware | * |
| pulsesecure | psa-7000_firmware | - |
| supermicro | x10sl7-f_firmware | * |
| supermicro | x10sll-sf_firmware | * |
| pulsesecure | psa-5000_firmware | - |
| supermicro | x10sla-f_firmware | * |
| supermicro | x10slh-f_firmware | * |
| supermicro | x10slm+ln4f_firmware | * |
| supermicro | x10slm-f_firmware | * |
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11scm-ln8f_firmware | - |
| supermicro | x11srm-f_firmware | - |
| supermicro | h12ssg-anp6_firmware | - |
| supermicro | x11qph+_firmware | - |
| supermicro | x11ssl_firmware | - |
| supermicro | h11dsi_firmware | - |
| supermicro | x11sse-f_firmware | - |
| supermicro | h12ssw-in_firmware | - |
| supermicro | h12ssw-inr_firmware | - |
| supermicro | x11scl-ln4f_firmware | - |
| supermicro | x11scd-f_firmware | - |
| supermicro | x11ssh-ln4f_firmware | - |
| supermicro | x11ssz-f_firmware | - |
| supermicro | x11ssw-f_firmware | - |
| supermicro | x11dpt-l_firmware | - |
| supermicro | h11dsu-in_firmware | - |
| supermicro | x11ssl-nf_firmware | - |
| supermicro | x12spw-tf_firmware | - |
| supermicro | x11spm-f_firmware | - |
| supermicro | h12sst-ps_firmware | - |
| supermicro | x11spl-f_firmware | - |
| supermicro | h12ssw-ntl_firmware | - |
| supermicro | x11sch-ln4f_firmware | - |
| supermicro | x12spm-ln6tf_firmware | - |
| supermicro | x11sds-12c_firmware | - |
| supermicro | h12dsi-nt6_firmware | - |
| supermicro | x11ssh-tf_firmware | - |
| supermicro | x11dpu-z+_firmware | - |
| supermicro | x11srl-f_firmware | - |
| supermicro | h12ssff-an6_firmware | - |
| supermicro | x11dpi-nt_firmware | - |
| supermicro | x12dpg-qt6_firmware | - |
| supermicro | x12spl-f_firmware | - |
| supermicro | x12spm-tf_firmware | - |
| supermicro | x12spo-f_firmware | - |
| supermicro | x12dpi-nt6_firmware | - |
| supermicro | x11sds-16c_firmware | - |
| supermicro | x11dpg-ot-cpu_firmware | - |
| supermicro | x11sch-f_firmware | - |
| supermicro | x12dpl-nt6_firmware | - |
| supermicro | x11dac_firmware | - |
| supermicro | x11ssn_firmware | - |
| supermicro | x11ssw-4tf_firmware | - |
| supermicro | x11ssz-tln4f_firmware | - |
| supermicro | h12dsg-o-cpu_firmware | - |
| supermicro | x11dpl-i_firmware | - |
| supermicro | x12dpl-i6_firmware | - |
| supermicro | x12spw-f_firmware | - |
| supermicro | h12ssl-ct_firmware | - |
| supermicro | h11dsi-nt_firmware | - |
| supermicro | x11srm-vf_firmware | - |
| supermicro | x11dpu-xll_firmware | - |
| supermicro | x11dph-t_firmware | - |
| supermicro | x11sae_m_firmware | - |
| supermicro | x11spw-ctf_firmware | - |
| supermicro | x11dsc+_firmware | - |
| supermicro | x12spo-ntf_firmware | - |
| supermicro | x11ssql_firmware | - |
| supermicro | x11dpt-ps_firmware | - |
| supermicro | x11opi-cpu_firmware | - |
| supermicro | x11ssl-f_firmware | - |
| supermicro | h12dsu-inr_firmware | - |
| supermicro | x12spm-ln4f_firmware | - |
| supermicro | x11ddw-l_firmware | - |
| supermicro | x11ssh-gtf-1585l_firmware | - |
| supermicro | x11dpu-v_firmware | - |
| supermicro | x12spi-tf_firmware | - |
| supermicro | h12ssl-i_firmware | - |
| supermicro | x12spz-ln4f_firmware | - |
| supermicro | x11dpg-sn_firmware | - |
| supermicro | x11dpt-b_firmware | - |
| supermicro | x11ssv-lvds_firmware | - |
| supermicro | x12spz-spln6f_firmware | - |
| supermicro | x11dph-tq_firmware | - |
| supermicro | x11ssh-ctf_firmware | - |
| supermicro | h12dgo-6_firmware | - |
| supermicro | x11srm_firmware | - |
| supermicro | x11sae_firmware | - |
| supermicro | x11dpfr-s_firmware | - |
| supermicro | x11scw-f_firmware | - |
| supermicro | x11dsn-tsq_firmware | - |
| supermicro | x11ssl-cf_firmware | - |
| supermicro | x11dpt-bh_firmware | - |
| supermicro | x11spi-tf_firmware | - |
| supermicro | x11dsf-e_firmware | - |
| supermicro | x11sba_firmware | - |
| supermicro | x11spg-tf_firmware | - |
| supermicro | x11ssv-q_firmware | - |
| supermicro | x11dpx-t_firmware | - |
| supermicro | x11ssh-gf-1585l_firmware | - |
| supermicro | h12dsi-n6_firmware | - |
| supermicro | x11dsn-ts_firmware | - |
| supermicro | x11spw-tf_firmware | - |
| supermicro | x11sdd-18c-f_firmware | - |
| supermicro | x11sph-nctf_firmware | - |
| supermicro | x11ssw-tf_firmware | - |
| supermicro | h12ssw-inl_firmware | - |
| supermicro | x11sri-if_firmware | - |
| supermicro | x11sph-nctpf_firmware | - |
| supermicro | x11ssm-f_firmware | - |
| supermicro | x11dpu-x_firmware | - |
| supermicro | x12ddw-a6_firmware | - |
| supermicro | x11dpff-sn_firmware | - |
| supermicro | x11dai-n_firmware | - |
| supermicro | x11ssd-f_firmware | - |
| supermicro | x12spa-tf_firmware | - |
| supermicro | x11spm-tf_firmware | - |
| supermicro | h12ssl-c_firmware | - |
| supermicro | x11dpg-qt_firmware | - |
| supermicro | x11sat_firmware | - |
| supermicro | x11dgo-t_firmware | - |
| supermicro | x11spa-t_firmware | - |
| supermicro | x12dpi-n6_firmware | - |
| supermicro | h12dst-b_firmware | - |
| supermicro | x11ssm_firmware | - |
| supermicro | x11ssh-f_firmware | - |
| supermicro | x11dgq_firmware | - |
| supermicro | x11ssq_firmware | - |
| supermicro | x11dpi-n_firmware | - |
| supermicro | x11sca_firmware | - |
| supermicro | x11sds-8c_firmware | - |
| supermicro | x11dpfr-sn_firmware | - |
| supermicro | x11sca-w_firmware | - |
| supermicro | x11dpu-ze+_firmware | - |
| supermicro | x12dai-n6_firmware | - |
| supermicro | x11ddw-nt_firmware | - |
| supermicro | x11spm-tpf_firmware | - |
| supermicro | x11dpu_firmware | - |
| supermicro | x11sra_firmware | - |
| supermicro | x11spa-tf_firmware | - |
| supermicro | h12ssl-nt_firmware | - |
| supermicro | x11dps-re_firmware | - |
| supermicro | x11scl-if_firmware | - |
| supermicro | x11ssi-ln4f_firmware | - |
| supermicro | x11scl-f_firmware | - |
| supermicro | h12ssw-ntr_firmware | - |
| supermicro | x11sdd-8c-f_firmware | - |
| supermicro | x12spl-ln4f_firmware | - |
| supermicro | h12dsu-in_firmware | - |
| supermicro | x11dph-i_firmware | - |
| supermicro | x11ssl-cf_firmware | 1.63 |
| supermicro | x11scm-f_firmware | - |
| supermicro | h11dst-b_firmware | - |
| supermicro | x11sca-f_firmware | - |
| supermicro | x11ssh-gtf-1585_firmware | - |
| supermicro | h12ssw-nt_firmware | - |
| supermicro | x11ssh-gf-1585_firmware | - |
A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 3.9 | 3.6 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x12sca-5f_firmware | * |
| supermicro | x12dpfr-an6_firmware | * |
| supermicro | x13dei-t_firmware | * |
| supermicro | x13sem-tf_firmware | * |
| supermicro | x11spm-tf_firmware | * |
| supermicro | x11ssn-e-001_firmware | * |
| supermicro | x11sra-f_firmware | * |
| supermicro | x11qpl_firmware | * |
| supermicro | x11scw-f_firmware | * |
| supermicro | x13sew-tf_firmware | * |
| supermicro | c9x299-pg300_firmware | * |
| supermicro | x11sdc-16c_firmware | * |
| supermicro | x13srn-h_firmware | * |
| supermicro | x11dsn-tsq_firmware | * |
| supermicro | x11sri-if_firmware | * |
| supermicro | x11sdw-16c-tp13f_firmware | * |
| supermicro | x11dpx-t_firmware | * |
| supermicro | x13dai-t_firmware | * |
| supermicro | x13sae-f_firmware | * |
| supermicro | x11sds-8c_firmware | * |
| supermicro | h13dsg-o-cpu_firmware | * |
| supermicro | x11sdv-16c-tp8f_firmware | * |
| supermicro | x11dpu-xll_firmware | * |
| supermicro | x12dpg-qbt6_firmware | * |
| supermicro | x11ssq_firmware | * |
| supermicro | x13san-h_firmware | * |
| supermicro | x11sdv-8c-tln2f_firmware | * |
| supermicro | x11sdv-8c-tp8f_firmware | * |
| supermicro | x12stl-if_firmware | * |
| supermicro | x11sdw-4c-tp13f+_firmware | * |
| supermicro | x11dpfr-s_firmware | * |
| supermicro | x11sdv-12c-tp8f_firmware | * |
| supermicro | c9x299-rpgf_firmware | * |
| supermicro | x11ssw-4tf_firmware | * |
| supermicro | x12stn-l-wohs_firmware | * |
| supermicro | x12dpg-oa6_firmware | * |
| supermicro | x12scv-lvds_firmware | * |
| supermicro | x12stn-e-wohs_firmware | * |
| supermicro | h12ssw-inr_firmware | * |
| supermicro | x11sae-m_firmware | * |
| supermicro | x12spt-g_firmware | * |
| supermicro | x11dph-i_firmware | * |
| supermicro | h12sst-ps_firmware | * |
| supermicro | x11sca_firmware | * |
| supermicro | x12sae_firmware | * |
| supermicro | x11ssl_firmware | * |
| supermicro | m11sdv-4ct-ln4f_firmware | * |
| supermicro | x11spa-tf_firmware | * |
| supermicro | h12ssw-an6_firmware | * |
| supermicro | x11ddw-l_firmware | * |
| supermicro | x11dph-t_firmware | * |
| supermicro | x11dsc+_firmware | * |
| supermicro | x11scq-l_firmware | * |
| supermicro | x11sdw-4c-tp13f_firmware | * |
| supermicro | x11dph-tq_firmware | * |
| supermicro | x13san-h-wohs_firmware | * |
| supermicro | x12dpu-6_firmware | * |
| supermicro | x12spl-f_firmware | * |
| supermicro | x11ssl-f_firmware | * |
| supermicro | x11san_firmware | * |
| supermicro | x12dgo-6_firmware | * |
| supermicro | m11sdv-8c+-ln4f_firmware | * |
| supermicro | h13ssh_firmware | * |
| supermicro | x12dpl-i6_firmware | * |
| supermicro | x11ssn-l-001_firmware | * |
| supermicro | h13sst-g_firmware | * |
| supermicro | x12spt-gc_firmware | * |
| supermicro | x11ssn-e_firmware | * |
| supermicro | x11srm-vf_firmware | * |
| supermicro | x11sph-nctpf_firmware | * |
| supermicro | x11ssh-tf_firmware | * |
| supermicro | h12ssl-ct_firmware | * |
| supermicro | x12sdv-4c-spt4f_firmware | * |
| supermicro | x11dpi-nt_firmware | * |
| supermicro | h13ssl-n_firmware | * |
| supermicro | x11sdv-4c-tp8f-01_firmware | * |
| supermicro | x13set-g_firmware | * |
| supermicro | x11saa_firmware | * |
| supermicro | c9x299-pgf_firmware | * |
| supermicro | x12sdv-20c-spt8f_firmware | * |
| supermicro | c9x299-pg_firmware | * |
| supermicro | h13srd-f_firmware | * |
| supermicro | x11dgo-t_firmware | * |
| supermicro | x11ssh-ctf_firmware | * |
| supermicro | x13ddw-a_firmware | * |
| supermicro | x11srl-f_firmware | * |
| supermicro | x11dpl-i_firmware | * |
| supermicro | x12spo-ntf_firmware | * |
| supermicro | x11scz-f_firmware | * |
| supermicro | h13sst-gc_firmware | * |
| supermicro | x12dai-n6_firmware | * |
| supermicro | x12sth-sys_firmware | * |
| supermicro | x13set-gc_firmware | * |
| supermicro | x11sba-ln4f_firmware | * |
| supermicro | x11ssn-e-vdc_firmware | * |
| supermicro | x13san-c-wohs_firmware | * |
| supermicro | x12stn-h-wohs_firmware | * |
| supermicro | x11sdv-4c-tln2f_firmware | * |
| supermicro | h12ssg-an6_firmware | * |
| supermicro | x12spm-ln6tf_firmware | * |
| supermicro | x11scl-if_firmware | * |
| supermicro | x13dgu_firmware | * |
| supermicro | x12sdv-16c-spt8f_firmware | * |
| supermicro | x12sdv-8c-spt8f_firmware | * |
| supermicro | x11dsn-ts_firmware | * |
| supermicro | x11spw-tf_firmware | * |
| supermicro | x11sdw-14c-tp13f_firmware | * |
| supermicro | x12scz-tln4f_firmware | * |
| supermicro | x13det-b_firmware | * |
| supermicro | x11ssw-tf_firmware | * |
| supermicro | x11sba-f_firmware | * |
| supermicro | x11swn-c-wohs_firmware | * |
| supermicro | x13sefr-a_firmware | * |
| supermicro | x13sei-f_firmware | * |
| supermicro | x11spl-f_firmware | * |
| supermicro | x11swn-h_firmware | * |
| supermicro | h13ssl-nt_firmware | * |
| supermicro | x12dpl-nt6_firmware | * |
| supermicro | x11sdd-8c-f_firmware | * |
| supermicro | x11sdv-12c-tln2f_firmware | * |
| supermicro | x12spw-f_firmware | * |
| supermicro | x12sca-f_firmware | * |
| supermicro | x11ssz-qf_firmware | * |
| supermicro | x11swn-e_firmware | * |
| supermicro | b12dpe-6_firmware | * |
| supermicro | h13svw-nt_firmware | * |
| supermicro | x13sedw-f_firmware | * |
| supermicro | x12dpd-a6m25_firmware | * |
| supermicro | x13deg-oad_firmware | * |
| supermicro | x11sds-14c_firmware | * |
| supermicro | x11ssh-gf-1585_firmware | * |
| supermicro | x11sdw-14cn-tp13f+_firmware | * |
| supermicro | x11ssh-gtf-1585l_firmware | * |
| supermicro | x11qph+_firmware | * |
| supermicro | x11sdw-8c-tp13f_firmware | * |
| supermicro | x11spm-tpf_firmware | * |
| supermicro | h12ssg-anp6_firmware | * |
| supermicro | x11sdd-18c-f_firmware | * |
| supermicro | x11scm-f_firmware | * |
| supermicro | x13deh_firmware | * |
| supermicro | x13san-e_firmware | * |
| supermicro | x11ssh-gf-1585l_firmware | * |
| supermicro | x11ssv-m4f_firmware | * |
| supermicro | x11srm-f_firmware | * |
| supermicro | x12stn-l_firmware | * |
| supermicro | x11dpd-l_firmware | * |
| supermicro | x12stl-f_firmware | * |
| supermicro | x11ssn-l_firmware | * |
| supermicro | x12sdv-10c-sp6f_firmware | * |
| supermicro | x11sdv-4c-tp8f_firmware | * |
| supermicro | x12spm-ln4f_firmware | * |
| supermicro | b12dpt-6_firmware | * |
| supermicro | h12ssl-i_firmware | * |
| supermicro | x13dsf-a_firmware | * |
| supermicro | x13sew-f_firmware | * |
| supermicro | x12stn-h_firmware | * |
| supermicro | x11ssh-f_firmware | * |
| supermicro | h12dsu-inr_firmware | * |
| supermicro | x11ssn-e-wohs_firmware | * |
| supermicro | x11spa-t_firmware | * |
| supermicro | x11dpfr-sn_firmware | * |
| supermicro | x13sra-tf_firmware | * |
| supermicro | h12dsg-q-cpu6_firmware | * |
| supermicro | x13qeh+_firmware | * |
| supermicro | x11scq_firmware | * |
| supermicro | x12std-f_firmware | * |
| supermicro | x12sth-f_firmware | * |
| supermicro | x11ssz-f_firmware | * |
| supermicro | x11sch-f_firmware | * |
| supermicro | x11ssn-l-wohs_firmware | * |
| supermicro | x11sds-16c_firmware | * |
| supermicro | x11ssn-l-vdc_firmware | * |
| supermicro | x12stw-f_firmware | * |
| supermicro | x12sdv-8c-spt4f_firmware | * |
| supermicro | x11dgq_firmware | * |
| supermicro | x11dpi-n_firmware | * |
| supermicro | x11ssi-ln4f_firmware | * |
| supermicro | x12dpi-nt6_firmware | * |
| supermicro | x11ssm-f_firmware | * |
| supermicro | h13sra-f_firmware | * |
| supermicro | x13swa-tf_firmware | * |
| supermicro | x12scq_firmware | * |
| supermicro | x11ssh-gtf-1585_firmware | * |
| supermicro | x12spl-ln4f_firmware | * |
| supermicro | h13ssf_firmware | * |
| supermicro | x11dpt-br_firmware | * |
| supermicro | x11sch-ln4f_firmware | * |
| supermicro | h12dst-b_firmware | * |
| supermicro | x13deg-pvc_firmware | * |
| supermicro | x13saq_firmware | * |
| supermicro | x12stn-c_firmware | * |
| supermicro | x11dpt-b_firmware | * |
| supermicro | x12spz-spln6f_firmware | * |
| supermicro | x11ddw-nt_firmware | * |
| supermicro | x11dpt-l_firmware | * |
| supermicro | x11dpg-ot-cpu_firmware | * |
| supermicro | x13saz-q_firmware | * |
| supermicro | x12dsc-6_firmware | * |
| supermicro | m11sdv-8ct-ln4f_firmware | * |
| supermicro | x11scl-ln4f_firmware | * |
| supermicro | x13sae_firmware | * |
| supermicro | x11sae-f_firmware | * |
| supermicro | x11sph-nctf_firmware | * |
| supermicro | x12spw-tf_firmware | * |
| supermicro | x11opi-cpu_firmware | * |
| supermicro | x11ssh-ln4f_firmware | * |
| supermicro | x11dai-n_firmware | * |
| supermicro | h12dgq-nt6_firmware | * |
| supermicro | x11ssd-f_firmware | * |
| supermicro | x11ssn-h_firmware | * |
| supermicro | x11swn-e-wohs_firmware | * |
| supermicro | x11dpff-sn_firmware | * |
| supermicro | c9x299-pg300f_firmware | * |
| supermicro | x12scz-qf_firmware | * |
| supermicro | x11dpt-ps_firmware | * |
| supermicro | x12sae-5_firmware | * |
| supermicro | x12ddw-a6_firmware | * |
| supermicro | x11dpu-r_firmware | * |
| supermicro | h12ssfr-an6_firmware | * |
| supermicro | x13san-c_firmware | * |
| supermicro | h12ssff-an6_firmware | * |
| supermicro | h13ssw_firmware | * |
| supermicro | x12scz-f_firmware | * |
| supermicro | x13deg-oa_firmware | * |
| supermicro | x12dpt-pt6_firmware | * |
| supermicro | x12dpg-ar_firmware | * |
| supermicro | x11dpt-bh_firmware | * |
| supermicro | x12dpi-n6_firmware | * |
| supermicro | x11sdw-12c-tp13f_firmware | * |
| supermicro | h12dgo-6_firmware | * |
| supermicro | h13dsg-om_firmware | * |
| supermicro | x13sem-f_firmware | * |
| supermicro | c9x299-pgf-l_firmware | * |
| supermicro | x11sdc-8c_firmware | * |
| supermicro | m11sdv-8c-ln4f_firmware | * |
| supermicro | x12dpg-qr_firmware | * |
| supermicro | h13dsg-o-cpu-d_firmware | * |
| supermicro | x11sdc-4c_firmware | * |
| supermicro | x11ssv-m4_firmware | * |
| supermicro | x12dhm-6_firmware | * |
| supermicro | x11ssn-h-001_firmware | * |
| supermicro | x11ssn-h-vdc_firmware | * |
| supermicro | x11ssz-tln4f_firmware | * |
| supermicro | x11scv-q_firmware | * |
| supermicro | x11scv-l_firmware | * |
| supermicro | h12dsi-nt6_firmware | * |
| supermicro | x12dgq-r_firmware | * |
| supermicro | x12stn-c-wohs_firmware | * |
| supermicro | x12spa-tf_firmware | * |
| supermicro | x11dsf-e_firmware | * |
| supermicro | x11swn-l-wohs_firmware | * |
| supermicro | h12ssw-in_firmware | * |
| supermicro | x11scd-f_firmware | * |
| supermicro | c9x299-rpgf-l_firmware | * |
| supermicro | b13see-cpu-25g_firmware | * |
| supermicro | x11ssl-cf_firmware | * |
| supermicro | x12dpg-u6_firmware | * |
| supermicro | x11sdv-16c-tln2f_firmware | * |
| supermicro | h12ssl-nt_firmware | * |
| supermicro | x11swn-c_firmware | * |
| supermicro | x13srn-h-wohs_firmware | * |
| supermicro | x11ssa-f_firmware | * |
| supermicro | x12sped-f_firmware | * |
| supermicro | x13san-e-wohs_firmware | * |
| supermicro | b12spe-cpu-25g_firmware | * |
| supermicro | h12ssw-ntr_firmware | * |
| supermicro | x11san-wohs_firmware | * |
| supermicro | h12ssw-ntl_firmware | * |
| supermicro | x11sds-12c_firmware | * |
| supermicro | b13det_firmware | * |
| supermicro | h12dsu-in_firmware | * |
| supermicro | x12sdv-4c-spt8f_firmware | * |
| supermicro | h13dsh_firmware | * |
| supermicro | x13seed-sf_firmware | * |
| supermicro | h12dsi-n6_firmware | * |
| supermicro | x12sdv-4c-sp6f_firmware | * |
| supermicro | x11sdv-16c+-tln2f_firmware | * |
| supermicro | x11sat-f_firmware | * |
| supermicro | h12ssw-inl_firmware | * |
| supermicro | x11spw-ctf_firmware | * |
| supermicro | x11sca-f_firmware | * |
| supermicro | h12dsg-o-cpu_firmware | * |
| supermicro | x11sra-rf_firmware | * |
| supermicro | x12spz-ln4f_firmware | * |
| supermicro | x11sdv-8c+-tln2f_firmware | * |
| supermicro | b13seg_firmware | * |
| supermicro | x11sat_firmware | * |
| supermicro | x11sae_firmware | * |
| supermicro | x12sdv-14c-spt8f_firmware | * |
| supermicro | h13sae-mf_firmware | * |
| supermicro | x13san-l_firmware | * |
| supermicro | x11dpd-m25_firmware | * |
| supermicro | x12spo-f_firmware | * |
| supermicro | x12sdv-8c-sp6f_firmware | * |
| supermicro | x12stn-e_firmware | * |
| supermicro | x12dpg-oa6-gd2_firmware | * |
| supermicro | x12spm-tf_firmware | * |
| supermicro | x11dpu-z+_firmware | * |
| supermicro | x12dpg-qt6_firmware | * |
| supermicro | x12stw-tf_firmware | * |
| supermicro | x11sse-f_firmware | * |
| supermicro | h13sra-tf_firmware | * |
| supermicro | x11dac_firmware | * |
| supermicro | x12dpt-b6_firmware | * |
| supermicro | h12ssl-c_firmware | * |
| supermicro | h12ssw-nt_firmware | * |
| supermicro | x11sca-w_firmware | * |
| supermicro | x13san-l-wohs_firmware | * |
| supermicro | x12dgu_firmware | * |
| supermicro | x11dpg-sn_firmware | * |
| supermicro | x11dpff-snr_firmware | * |
| supermicro | x11swn-h-wohs_firmware | * |
| supermicro | x11dsc_firmware | * |
| supermicro | x11sra_firmware | * |
| supermicro | x11dpu_firmware | * |
| supermicro | x12spt-pt_firmware | * |
| supermicro | x11opi-cpu-cl_firmware | * |
| supermicro | b13dee_firmware | * |
| supermicro | x11scz-q_firmware | * |
| supermicro | x11sce-f_firmware | * |
| supermicro | x13srn-e-wohs_firmware | * |
| supermicro | x12qch+_firmware | * |
| supermicro | x11ssv-lvds_firmware | * |
| supermicro | x13saz-f_firmware | * |
| supermicro | x13dei_firmware | * |
| supermicro | x12sdv-8ce-sp4f_firmware | * |
| supermicro | x12dpt-pt46_firmware | * |
| supermicro | x11ssm_firmware | * |
| supermicro | m11sdv-4c-ln4f_firmware | * |
| supermicro | x13seed-f_firmware | * |
| supermicro | x12sdv-10c-spt4f_firmware | * |
| supermicro | x13sav-lvds_firmware | * |
| supermicro | x12scv-w_firmware | * |
| supermicro | x11ssl-nf_firmware | * |
| supermicro | x13sav-ps_firmware | * |
| supermicro | x11scm-ln8f_firmware | * |
| supermicro | x11dps-re_firmware | * |
| supermicro | x11scl-f_firmware | * |
| supermicro | x11spm-f_firmware | * |
| supermicro | x11dpg-hgx2_firmware | * |
| supermicro | x11dpg-qt_firmware | * |
| supermicro | x12sth-ln4f_firmware | * |
| supermicro | x11spg-tf_firmware | * |
| supermicro | x11ssq-l_firmware | * |
| supermicro | h13svw-n_firmware | * |
| supermicro | x13srn-e_firmware | * |
| supermicro | x11sdw-14cnt-tp13f_firmware | * |
| supermicro | x11spd-f_firmware | * |
| supermicro | x11ssv-q_firmware | * |
| supermicro | x11dpu-v_firmware | * |
| supermicro | x11ssn-h-wohs_firmware | * |
| supermicro | x11ssw-f_firmware | * |
| supermicro | x11swn-l_firmware | * |
| supermicro | x13deg-qt_firmware | * |
| supermicro | x12spg-nf_firmware | * |
| supermicro | x13dem_firmware | * |
| supermicro | x12ste-f_firmware | * |
| supermicro | x11sdw-16c-tp13f+_firmware | * |
| supermicro | x13sei-tf_firmware | * |
| supermicro | x12spi-tf_firmware | * |
| supermicro | x11spi-tf_firmware | * |
| supermicro | x11dpu-ze+_firmware | * |
The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x12sca-5f_firmware | * |
| supermicro | x12dpfr-an6_firmware | * |
| supermicro | x13dei-t_firmware | * |
| supermicro | x13sem-tf_firmware | * |
| supermicro | x11spm-tf_firmware | * |
| supermicro | x11ssn-e-001_firmware | * |
| supermicro | x11sra-f_firmware | * |
| supermicro | x11qpl_firmware | * |
| supermicro | x11scw-f_firmware | * |
| supermicro | x13sew-tf_firmware | * |
| supermicro | c9x299-pg300_firmware | * |
| supermicro | x11sdc-16c_firmware | * |
| supermicro | x13srn-h_firmware | * |
| supermicro | x11dsn-tsq_firmware | * |
| supermicro | x11sri-if_firmware | * |
| supermicro | x11sdw-16c-tp13f_firmware | * |
| supermicro | x11dpx-t_firmware | * |
| supermicro | x13dai-t_firmware | * |
| supermicro | x13sae-f_firmware | * |
| supermicro | x11sds-8c_firmware | * |
| supermicro | h13dsg-o-cpu_firmware | * |
| supermicro | x11sdv-16c-tp8f_firmware | * |
| supermicro | x11dpu-xll_firmware | * |
| supermicro | x12dpg-qbt6_firmware | * |
| supermicro | x11ssq_firmware | * |
| supermicro | x13san-h_firmware | * |
| supermicro | x11sdv-8c-tln2f_firmware | * |
| supermicro | x11sdv-8c-tp8f_firmware | * |
| supermicro | x12stl-if_firmware | * |
| supermicro | x11sdw-4c-tp13f+_firmware | * |
| supermicro | x11dpfr-s_firmware | * |
| supermicro | x11sdv-12c-tp8f_firmware | * |
| supermicro | c9x299-rpgf_firmware | * |
| supermicro | x11ssw-4tf_firmware | * |
| supermicro | x12stn-l-wohs_firmware | * |
| supermicro | x12dpg-oa6_firmware | * |
| supermicro | x12scv-lvds_firmware | * |
| supermicro | x12stn-e-wohs_firmware | * |
| supermicro | h12ssw-inr_firmware | * |
| supermicro | x11sae-m_firmware | * |
| supermicro | x12spt-g_firmware | * |
| supermicro | x11dph-i_firmware | * |
| supermicro | h12sst-ps_firmware | * |
| supermicro | x11sca_firmware | * |
| supermicro | x12sae_firmware | * |
| supermicro | x11ssl_firmware | * |
| supermicro | m11sdv-4ct-ln4f_firmware | * |
| supermicro | x11spa-tf_firmware | * |
| supermicro | h12ssw-an6_firmware | * |
| supermicro | x11ddw-l_firmware | * |
| supermicro | x11dph-t_firmware | * |
| supermicro | x11dsc+_firmware | * |
| supermicro | x11scq-l_firmware | * |
| supermicro | x11sdw-4c-tp13f_firmware | * |
| supermicro | x11dph-tq_firmware | * |
| supermicro | x13san-h-wohs_firmware | * |
| supermicro | x12dpu-6_firmware | * |
| supermicro | x12spl-f_firmware | * |
| supermicro | x11ssl-f_firmware | * |
| supermicro | x11san_firmware | * |
| supermicro | x12dgo-6_firmware | * |
| supermicro | m11sdv-8c+-ln4f_firmware | * |
| supermicro | h13ssh_firmware | * |
| supermicro | x12dpl-i6_firmware | * |
| supermicro | x11ssn-l-001_firmware | * |
| supermicro | h13sst-g_firmware | * |
| supermicro | x12spt-gc_firmware | * |
| supermicro | x11ssn-e_firmware | * |
| supermicro | x11srm-vf_firmware | * |
| supermicro | x11sph-nctpf_firmware | * |
| supermicro | x11ssh-tf_firmware | * |
| supermicro | h12ssl-ct_firmware | * |
| supermicro | x12sdv-4c-spt4f_firmware | * |
| supermicro | x11dpi-nt_firmware | * |
| supermicro | h13ssl-n_firmware | * |
| supermicro | x11sdv-4c-tp8f-01_firmware | * |
| supermicro | x13set-g_firmware | * |
| supermicro | x11saa_firmware | * |
| supermicro | c9x299-pgf_firmware | * |
| supermicro | x12sdv-20c-spt8f_firmware | * |
| supermicro | c9x299-pg_firmware | * |
| supermicro | h13srd-f_firmware | * |
| supermicro | x11dgo-t_firmware | * |
| supermicro | x11ssh-ctf_firmware | * |
| supermicro | x13ddw-a_firmware | * |
| supermicro | x11srl-f_firmware | * |
| supermicro | x11dpl-i_firmware | * |
| supermicro | x12spo-ntf_firmware | * |
| supermicro | x11scz-f_firmware | * |
| supermicro | h13sst-gc_firmware | * |
| supermicro | x12dai-n6_firmware | * |
| supermicro | x12sth-sys_firmware | * |
| supermicro | x13set-gc_firmware | * |
| supermicro | x11sba-ln4f_firmware | * |
| supermicro | x11ssn-e-vdc_firmware | * |
| supermicro | x13san-c-wohs_firmware | * |
| supermicro | x12stn-h-wohs_firmware | * |
| supermicro | x11sdv-4c-tln2f_firmware | * |
| supermicro | h12ssg-an6_firmware | * |
| supermicro | x12spm-ln6tf_firmware | * |
| supermicro | x11scl-if_firmware | * |
| supermicro | x13dgu_firmware | * |
| supermicro | x12sdv-16c-spt8f_firmware | * |
| supermicro | x12sdv-8c-spt8f_firmware | * |
| supermicro | x11dsn-ts_firmware | * |
| supermicro | x11spw-tf_firmware | * |
| supermicro | x11sdw-14c-tp13f_firmware | * |
| supermicro | x12scz-tln4f_firmware | * |
| supermicro | x13det-b_firmware | * |
| supermicro | x11ssw-tf_firmware | * |
| supermicro | x11sba-f_firmware | * |
| supermicro | x11swn-c-wohs_firmware | * |
| supermicro | x13sefr-a_firmware | * |
| supermicro | x13sei-f_firmware | * |
| supermicro | x11spl-f_firmware | * |
| supermicro | x11swn-h_firmware | * |
| supermicro | h13ssl-nt_firmware | * |
| supermicro | x12dpl-nt6_firmware | * |
| supermicro | x11sdd-8c-f_firmware | * |
| supermicro | x11sdv-12c-tln2f_firmware | * |
| supermicro | x12spw-f_firmware | * |
| supermicro | x12sca-f_firmware | * |
| supermicro | x11ssz-qf_firmware | * |
| supermicro | x11swn-e_firmware | * |
| supermicro | b12dpe-6_firmware | * |
| supermicro | h13svw-nt_firmware | * |
| supermicro | x13sedw-f_firmware | * |
| supermicro | x12dpd-a6m25_firmware | * |
| supermicro | x13deg-oad_firmware | * |
| supermicro | x11sds-14c_firmware | * |
| supermicro | x11ssh-gf-1585_firmware | * |
| supermicro | x11sdw-14cn-tp13f+_firmware | * |
| supermicro | x11ssh-gtf-1585l_firmware | * |
| supermicro | x11qph+_firmware | * |
| supermicro | x11sdw-8c-tp13f_firmware | * |
| supermicro | x11spm-tpf_firmware | * |
| supermicro | h12ssg-anp6_firmware | * |
| supermicro | x11sdd-18c-f_firmware | * |
| supermicro | x11scm-f_firmware | * |
| supermicro | x13deh_firmware | * |
| supermicro | x13san-e_firmware | * |
| supermicro | x11ssh-gf-1585l_firmware | * |
| supermicro | x11ssv-m4f_firmware | * |
| supermicro | x11srm-f_firmware | * |
| supermicro | x12stn-l_firmware | * |
| supermicro | x11dpd-l_firmware | * |
| supermicro | x12stl-f_firmware | * |
| supermicro | x11ssn-l_firmware | * |
| supermicro | x12sdv-10c-sp6f_firmware | * |
| supermicro | x11sdv-4c-tp8f_firmware | * |
| supermicro | x12spm-ln4f_firmware | * |
| supermicro | b12dpt-6_firmware | * |
| supermicro | h12ssl-i_firmware | * |
| supermicro | x13dsf-a_firmware | * |
| supermicro | x13sew-f_firmware | * |
| supermicro | x12stn-h_firmware | * |
| supermicro | x11ssh-f_firmware | * |
| supermicro | h12dsu-inr_firmware | * |
| supermicro | x11ssn-e-wohs_firmware | * |
| supermicro | x11spa-t_firmware | * |
| supermicro | x11dpfr-sn_firmware | * |
| supermicro | x13sra-tf_firmware | * |
| supermicro | h12dsg-q-cpu6_firmware | * |
| supermicro | x13qeh+_firmware | * |
| supermicro | x11scq_firmware | * |
| supermicro | x12std-f_firmware | * |
| supermicro | x12sth-f_firmware | * |
| supermicro | x11ssz-f_firmware | * |
| supermicro | x11sch-f_firmware | * |
| supermicro | x11ssn-l-wohs_firmware | * |
| supermicro | x11sds-16c_firmware | * |
| supermicro | x11ssn-l-vdc_firmware | * |
| supermicro | x12stw-f_firmware | * |
| supermicro | x12sdv-8c-spt4f_firmware | * |
| supermicro | x11dgq_firmware | * |
| supermicro | x11dpi-n_firmware | * |
| supermicro | x11ssi-ln4f_firmware | * |
| supermicro | x12dpi-nt6_firmware | * |
| supermicro | x11ssm-f_firmware | * |
| supermicro | h13sra-f_firmware | * |
| supermicro | x13swa-tf_firmware | * |
| supermicro | x12scq_firmware | * |
| supermicro | x11ssh-gtf-1585_firmware | * |
| supermicro | x12spl-ln4f_firmware | * |
| supermicro | h13ssf_firmware | * |
| supermicro | x11dpt-br_firmware | * |
| supermicro | x11sch-ln4f_firmware | * |
| supermicro | h12dst-b_firmware | * |
| supermicro | x13deg-pvc_firmware | * |
| supermicro | x13saq_firmware | * |
| supermicro | x12stn-c_firmware | * |
| supermicro | x11dpt-b_firmware | * |
| supermicro | x12spz-spln6f_firmware | * |
| supermicro | x11ddw-nt_firmware | * |
| supermicro | x11dpt-l_firmware | * |
| supermicro | x11dpg-ot-cpu_firmware | * |
| supermicro | x13saz-q_firmware | * |
| supermicro | x12dsc-6_firmware | * |
| supermicro | m11sdv-8ct-ln4f_firmware | * |
| supermicro | x11scl-ln4f_firmware | * |
| supermicro | x13sae_firmware | * |
| supermicro | x11sae-f_firmware | * |
| supermicro | x11sph-nctf_firmware | * |
| supermicro | x12spw-tf_firmware | * |
| supermicro | x11opi-cpu_firmware | * |
| supermicro | x11ssh-ln4f_firmware | * |
| supermicro | x11dai-n_firmware | * |
| supermicro | h12dgq-nt6_firmware | * |
| supermicro | x11ssd-f_firmware | * |
| supermicro | x11ssn-h_firmware | * |
| supermicro | x11swn-e-wohs_firmware | * |
| supermicro | x11dpff-sn_firmware | * |
| supermicro | c9x299-pg300f_firmware | * |
| supermicro | x12scz-qf_firmware | * |
| supermicro | x11dpt-ps_firmware | * |
| supermicro | x12sae-5_firmware | * |
| supermicro | x12ddw-a6_firmware | * |
| supermicro | x11dpu-r_firmware | * |
| supermicro | h12ssfr-an6_firmware | * |
| supermicro | x13san-c_firmware | * |
| supermicro | h12ssff-an6_firmware | * |
| supermicro | h13ssw_firmware | * |
| supermicro | x12scz-f_firmware | * |
| supermicro | x13deg-oa_firmware | * |
| supermicro | x12dpt-pt6_firmware | * |
| supermicro | x12dpg-ar_firmware | * |
| supermicro | x11dpt-bh_firmware | * |
| supermicro | x12dpi-n6_firmware | * |
| supermicro | x11sdw-12c-tp13f_firmware | * |
| supermicro | h12dgo-6_firmware | * |
| supermicro | h13dsg-om_firmware | * |
| supermicro | x13sem-f_firmware | * |
| supermicro | c9x299-pgf-l_firmware | * |
| supermicro | x11sdc-8c_firmware | * |
| supermicro | m11sdv-8c-ln4f_firmware | * |
| supermicro | x12dpg-qr_firmware | * |
| supermicro | h13dsg-o-cpu-d_firmware | * |
| supermicro | x11sdc-4c_firmware | * |
| supermicro | x11ssv-m4_firmware | * |
| supermicro | x12dhm-6_firmware | * |
| supermicro | x11ssn-h-001_firmware | * |
| supermicro | x11ssn-h-vdc_firmware | * |
| supermicro | x11ssz-tln4f_firmware | * |
| supermicro | x11scv-q_firmware | * |
| supermicro | x11scv-l_firmware | * |
| supermicro | h12dsi-nt6_firmware | * |
| supermicro | x12dgq-r_firmware | * |
| supermicro | x12stn-c-wohs_firmware | * |
| supermicro | x12spa-tf_firmware | * |
| supermicro | x11dsf-e_firmware | * |
| supermicro | x11swn-l-wohs_firmware | * |
| supermicro | h12ssw-in_firmware | * |
| supermicro | x11scd-f_firmware | * |
| supermicro | c9x299-rpgf-l_firmware | * |
| supermicro | b13see-cpu-25g_firmware | * |
| supermicro | x11ssl-cf_firmware | * |
| supermicro | x12dpg-u6_firmware | * |
| supermicro | x11sdv-16c-tln2f_firmware | * |
| supermicro | h12ssl-nt_firmware | * |
| supermicro | x11swn-c_firmware | * |
| supermicro | x13srn-h-wohs_firmware | * |
| supermicro | x11ssa-f_firmware | * |
| supermicro | x12sped-f_firmware | * |
| supermicro | x13san-e-wohs_firmware | * |
| supermicro | b12spe-cpu-25g_firmware | * |
| supermicro | h12ssw-ntr_firmware | * |
| supermicro | x11san-wohs_firmware | * |
| supermicro | h12ssw-ntl_firmware | * |
| supermicro | x11sds-12c_firmware | * |
| supermicro | b13det_firmware | * |
| supermicro | h12dsu-in_firmware | * |
| supermicro | x12sdv-4c-spt8f_firmware | * |
| supermicro | h13dsh_firmware | * |
| supermicro | x13seed-sf_firmware | * |
| supermicro | h12dsi-n6_firmware | * |
| supermicro | x12sdv-4c-sp6f_firmware | * |
| supermicro | x11sdv-16c+-tln2f_firmware | * |
| supermicro | x11sat-f_firmware | * |
| supermicro | h12ssw-inl_firmware | * |
| supermicro | x11spw-ctf_firmware | * |
| supermicro | x11sca-f_firmware | * |
| supermicro | h12dsg-o-cpu_firmware | * |
| supermicro | x11sra-rf_firmware | * |
| supermicro | x12spz-ln4f_firmware | * |
| supermicro | x11sdv-8c+-tln2f_firmware | * |
| supermicro | b13seg_firmware | * |
| supermicro | x11sat_firmware | * |
| supermicro | x11sae_firmware | * |
| supermicro | x12sdv-14c-spt8f_firmware | * |
| supermicro | h13sae-mf_firmware | * |
| supermicro | x13san-l_firmware | * |
| supermicro | x11dpd-m25_firmware | * |
| supermicro | x12spo-f_firmware | * |
| supermicro | x12sdv-8c-sp6f_firmware | * |
| supermicro | x12stn-e_firmware | * |
| supermicro | x12dpg-oa6-gd2_firmware | * |
| supermicro | x12spm-tf_firmware | * |
| supermicro | x11dpu-z+_firmware | * |
| supermicro | x12dpg-qt6_firmware | * |
| supermicro | x12stw-tf_firmware | * |
| supermicro | x11sse-f_firmware | * |
| supermicro | h13sra-tf_firmware | * |
| supermicro | x11dac_firmware | * |
| supermicro | x12dpt-b6_firmware | * |
| supermicro | h12ssl-c_firmware | * |
| supermicro | h12ssw-nt_firmware | * |
| supermicro | x11sca-w_firmware | * |
| supermicro | x13san-l-wohs_firmware | * |
| supermicro | x12dgu_firmware | * |
| supermicro | x11dpg-sn_firmware | * |
| supermicro | x11dpff-snr_firmware | * |
| supermicro | x11swn-h-wohs_firmware | * |
| supermicro | x11dsc_firmware | * |
| supermicro | x11sra_firmware | * |
| supermicro | x11dpu_firmware | * |
| supermicro | x12spt-pt_firmware | * |
| supermicro | x11opi-cpu-cl_firmware | * |
| supermicro | b13dee_firmware | * |
| supermicro | x11scz-q_firmware | * |
| supermicro | x11sce-f_firmware | * |
| supermicro | x13srn-e-wohs_firmware | * |
| supermicro | x12qch+_firmware | * |
| supermicro | x11ssv-lvds_firmware | * |
| supermicro | x13saz-f_firmware | * |
| supermicro | x13dei_firmware | * |
| supermicro | x12sdv-8ce-sp4f_firmware | * |
| supermicro | x12dpt-pt46_firmware | * |
| supermicro | x11ssm_firmware | * |
| supermicro | m11sdv-4c-ln4f_firmware | * |
| supermicro | x13seed-f_firmware | * |
| supermicro | x12sdv-10c-spt4f_firmware | * |
| supermicro | x13sav-lvds_firmware | * |
| supermicro | x12scv-w_firmware | * |
| supermicro | x11ssl-nf_firmware | * |
| supermicro | x13sav-ps_firmware | * |
| supermicro | x11scm-ln8f_firmware | * |
| supermicro | x11dps-re_firmware | * |
| supermicro | x11scl-f_firmware | * |
| supermicro | x11spm-f_firmware | * |
| supermicro | x11dpg-hgx2_firmware | * |
| supermicro | x11dpg-qt_firmware | * |
| supermicro | x12sth-ln4f_firmware | * |
| supermicro | x11spg-tf_firmware | * |
| supermicro | x11ssq-l_firmware | * |
| supermicro | h13svw-n_firmware | * |
| supermicro | x13srn-e_firmware | * |
| supermicro | x11sdw-14cnt-tp13f_firmware | * |
| supermicro | x11spd-f_firmware | * |
| supermicro | x11ssv-q_firmware | * |
| supermicro | x11dpu-v_firmware | * |
| supermicro | x11ssn-h-wohs_firmware | * |
| supermicro | x11ssw-f_firmware | * |
| supermicro | x11swn-l_firmware | * |
| supermicro | x13deg-qt_firmware | * |
| supermicro | x12spg-nf_firmware | * |
| supermicro | x13dem_firmware | * |
| supermicro | x12ste-f_firmware | * |
| supermicro | x11sdw-16c-tp13f+_firmware | * |
| supermicro | x13sei-tf_firmware | * |
| supermicro | x12spi-tf_firmware | * |
| supermicro | x11spi-tf_firmware | * |
| supermicro | x11dpu-ze+_firmware | * |
The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x12sca-5f_firmware | * |
| supermicro | x12dpfr-an6_firmware | * |
| supermicro | x13dei-t_firmware | * |
| supermicro | x13sem-tf_firmware | * |
| supermicro | x11spm-tf_firmware | * |
| supermicro | x11ssn-e-001_firmware | * |
| supermicro | x11sra-f_firmware | * |
| supermicro | x11qpl_firmware | * |
| supermicro | x11scw-f_firmware | * |
| supermicro | x13sew-tf_firmware | * |
| supermicro | c9x299-pg300_firmware | * |
| supermicro | x11sdc-16c_firmware | * |
| supermicro | x13srn-h_firmware | * |
| supermicro | x11dsn-tsq_firmware | * |
| supermicro | x11sri-if_firmware | * |
| supermicro | x11sdw-16c-tp13f_firmware | * |
| supermicro | x11dpx-t_firmware | * |
| supermicro | x13dai-t_firmware | * |
| supermicro | x13sae-f_firmware | * |
| supermicro | x11sds-8c_firmware | * |
| supermicro | h13dsg-o-cpu_firmware | * |
| supermicro | x11sdv-16c-tp8f_firmware | * |
| supermicro | x11dpu-xll_firmware | * |
| supermicro | x12dpg-qbt6_firmware | * |
| supermicro | x11ssq_firmware | * |
| supermicro | x13san-h_firmware | * |
| supermicro | x11sdv-8c-tln2f_firmware | * |
| supermicro | x11sdv-8c-tp8f_firmware | * |
| supermicro | x12stl-if_firmware | * |
| supermicro | x11sdw-4c-tp13f+_firmware | * |
| supermicro | x11dpfr-s_firmware | * |
| supermicro | x11sdv-12c-tp8f_firmware | * |
| supermicro | c9x299-rpgf_firmware | * |
| supermicro | x11ssw-4tf_firmware | * |
| supermicro | x12stn-l-wohs_firmware | * |
| supermicro | x12dpg-oa6_firmware | * |
| supermicro | x12scv-lvds_firmware | * |
| supermicro | x12stn-e-wohs_firmware | * |
| supermicro | h12ssw-inr_firmware | * |
| supermicro | x11sae-m_firmware | * |
| supermicro | x12spt-g_firmware | * |
| supermicro | x11dph-i_firmware | * |
| supermicro | h12sst-ps_firmware | * |
| supermicro | x11sca_firmware | * |
| supermicro | x12sae_firmware | * |
| supermicro | x11ssl_firmware | * |
| supermicro | m11sdv-4ct-ln4f_firmware | * |
| supermicro | x11spa-tf_firmware | * |
| supermicro | h12ssw-an6_firmware | * |
| supermicro | x11ddw-l_firmware | * |
| supermicro | x11dph-t_firmware | * |
| supermicro | x11dsc+_firmware | * |
| supermicro | x11scq-l_firmware | * |
| supermicro | x11sdw-4c-tp13f_firmware | * |
| supermicro | x11dph-tq_firmware | * |
| supermicro | x13san-h-wohs_firmware | * |
| supermicro | x12dpu-6_firmware | * |
| supermicro | x12spl-f_firmware | * |
| supermicro | x11ssl-f_firmware | * |
| supermicro | x11san_firmware | * |
| supermicro | x12dgo-6_firmware | * |
| supermicro | m11sdv-8c+-ln4f_firmware | * |
| supermicro | h13ssh_firmware | * |
| supermicro | x12dpl-i6_firmware | * |
| supermicro | x11ssn-l-001_firmware | * |
| supermicro | h13sst-g_firmware | * |
| supermicro | x12spt-gc_firmware | * |
| supermicro | x11ssn-e_firmware | * |
| supermicro | x11srm-vf_firmware | * |
| supermicro | x11sph-nctpf_firmware | * |
| supermicro | x11ssh-tf_firmware | * |
| supermicro | h12ssl-ct_firmware | * |
| supermicro | x12sdv-4c-spt4f_firmware | * |
| supermicro | x11dpi-nt_firmware | * |
| supermicro | h13ssl-n_firmware | * |
| supermicro | x11sdv-4c-tp8f-01_firmware | * |
| supermicro | x13set-g_firmware | * |
| supermicro | x11saa_firmware | * |
| supermicro | c9x299-pgf_firmware | * |
| supermicro | x12sdv-20c-spt8f_firmware | * |
| supermicro | c9x299-pg_firmware | * |
| supermicro | h13srd-f_firmware | * |
| supermicro | x11dgo-t_firmware | * |
| supermicro | x11ssh-ctf_firmware | * |
| supermicro | x13ddw-a_firmware | * |
| supermicro | x11srl-f_firmware | * |
| supermicro | x11dpl-i_firmware | * |
| supermicro | x12spo-ntf_firmware | * |
| supermicro | x11scz-f_firmware | * |
| supermicro | h13sst-gc_firmware | * |
| supermicro | x12dai-n6_firmware | * |
| supermicro | x12sth-sys_firmware | * |
| supermicro | x13set-gc_firmware | * |
| supermicro | x11sba-ln4f_firmware | * |
| supermicro | x11ssn-e-vdc_firmware | * |
| supermicro | x13san-c-wohs_firmware | * |
| supermicro | x12stn-h-wohs_firmware | * |
| supermicro | x11sdv-4c-tln2f_firmware | * |
| supermicro | h12ssg-an6_firmware | * |
| supermicro | x12spm-ln6tf_firmware | * |
| supermicro | x11scl-if_firmware | * |
| supermicro | x13dgu_firmware | * |
| supermicro | x12sdv-16c-spt8f_firmware | * |
| supermicro | x12sdv-8c-spt8f_firmware | * |
| supermicro | x11dsn-ts_firmware | * |
| supermicro | x11spw-tf_firmware | * |
| supermicro | x11sdw-14c-tp13f_firmware | * |
| supermicro | x12scz-tln4f_firmware | * |
| supermicro | x13det-b_firmware | * |
| supermicro | x11ssw-tf_firmware | * |
| supermicro | x11sba-f_firmware | * |
| supermicro | x11swn-c-wohs_firmware | * |
| supermicro | x13sefr-a_firmware | * |
| supermicro | x13sei-f_firmware | * |
| supermicro | x11spl-f_firmware | * |
| supermicro | x11swn-h_firmware | * |
| supermicro | h13ssl-nt_firmware | * |
| supermicro | x12dpl-nt6_firmware | * |
| supermicro | x11sdd-8c-f_firmware | * |
| supermicro | x11sdv-12c-tln2f_firmware | * |
| supermicro | x12spw-f_firmware | * |
| supermicro | x12sca-f_firmware | * |
| supermicro | x11ssz-qf_firmware | * |
| supermicro | x11swn-e_firmware | * |
| supermicro | b12dpe-6_firmware | * |
| supermicro | h13svw-nt_firmware | * |
| supermicro | x13sedw-f_firmware | * |
| supermicro | x12dpd-a6m25_firmware | * |
| supermicro | x13deg-oad_firmware | * |
| supermicro | x11sds-14c_firmware | * |
| supermicro | x11ssh-gf-1585_firmware | * |
| supermicro | x11sdw-14cn-tp13f+_firmware | * |
| supermicro | x11ssh-gtf-1585l_firmware | * |
| supermicro | x11qph+_firmware | * |
| supermicro | x11sdw-8c-tp13f_firmware | * |
| supermicro | x11spm-tpf_firmware | * |
| supermicro | h12ssg-anp6_firmware | * |
| supermicro | x11sdd-18c-f_firmware | * |
| supermicro | x11scm-f_firmware | * |
| supermicro | x13deh_firmware | * |
| supermicro | x13san-e_firmware | * |
| supermicro | x11ssh-gf-1585l_firmware | * |
| supermicro | x11ssv-m4f_firmware | * |
| supermicro | x11srm-f_firmware | * |
| supermicro | x12stn-l_firmware | * |
| supermicro | x11dpd-l_firmware | * |
| supermicro | x12stl-f_firmware | * |
| supermicro | x11ssn-l_firmware | * |
| supermicro | x12sdv-10c-sp6f_firmware | * |
| supermicro | x11sdv-4c-tp8f_firmware | * |
| supermicro | x12spm-ln4f_firmware | * |
| supermicro | b12dpt-6_firmware | * |
| supermicro | h12ssl-i_firmware | * |
| supermicro | x13dsf-a_firmware | * |
| supermicro | x13sew-f_firmware | * |
| supermicro | x12stn-h_firmware | * |
| supermicro | x11ssh-f_firmware | * |
| supermicro | h12dsu-inr_firmware | * |
| supermicro | x11ssn-e-wohs_firmware | * |
| supermicro | x11spa-t_firmware | * |
| supermicro | x11dpfr-sn_firmware | * |
| supermicro | x13sra-tf_firmware | * |
| supermicro | h12dsg-q-cpu6_firmware | * |
| supermicro | x13qeh+_firmware | * |
| supermicro | x11scq_firmware | * |
| supermicro | x12std-f_firmware | * |
| supermicro | x12sth-f_firmware | * |
| supermicro | x11ssz-f_firmware | * |
| supermicro | x11sch-f_firmware | * |
| supermicro | x11ssn-l-wohs_firmware | * |
| supermicro | x11sds-16c_firmware | * |
| supermicro | x11ssn-l-vdc_firmware | * |
| supermicro | x12stw-f_firmware | * |
| supermicro | x12sdv-8c-spt4f_firmware | * |
| supermicro | x11dgq_firmware | * |
| supermicro | x11dpi-n_firmware | * |
| supermicro | x11ssi-ln4f_firmware | * |
| supermicro | x12dpi-nt6_firmware | * |
| supermicro | x11ssm-f_firmware | * |
| supermicro | h13sra-f_firmware | * |
| supermicro | x13swa-tf_firmware | * |
| supermicro | x12scq_firmware | * |
| supermicro | x11ssh-gtf-1585_firmware | * |
| supermicro | x12spl-ln4f_firmware | * |
| supermicro | h13ssf_firmware | * |
| supermicro | x11dpt-br_firmware | * |
| supermicro | x11sch-ln4f_firmware | * |
| supermicro | h12dst-b_firmware | * |
| supermicro | x13deg-pvc_firmware | * |
| supermicro | x13saq_firmware | * |
| supermicro | x12stn-c_firmware | * |
| supermicro | x11dpt-b_firmware | * |
| supermicro | x12spz-spln6f_firmware | * |
| supermicro | x11ddw-nt_firmware | * |
| supermicro | x11dpt-l_firmware | * |
| supermicro | x11dpg-ot-cpu_firmware | * |
| supermicro | x13saz-q_firmware | * |
| supermicro | x12dsc-6_firmware | * |
| supermicro | m11sdv-8ct-ln4f_firmware | * |
| supermicro | x11scl-ln4f_firmware | * |
| supermicro | x13sae_firmware | * |
| supermicro | x11sae-f_firmware | * |
| supermicro | x11sph-nctf_firmware | * |
| supermicro | x12spw-tf_firmware | * |
| supermicro | x11opi-cpu_firmware | * |
| supermicro | x11ssh-ln4f_firmware | * |
| supermicro | x11dai-n_firmware | * |
| supermicro | h12dgq-nt6_firmware | * |
| supermicro | x11ssd-f_firmware | * |
| supermicro | x11ssn-h_firmware | * |
| supermicro | x11swn-e-wohs_firmware | * |
| supermicro | x11dpff-sn_firmware | * |
| supermicro | c9x299-pg300f_firmware | * |
| supermicro | x12scz-qf_firmware | * |
| supermicro | x11dpt-ps_firmware | * |
| supermicro | x12sae-5_firmware | * |
| supermicro | x12ddw-a6_firmware | * |
| supermicro | x11dpu-r_firmware | * |
| supermicro | h12ssfr-an6_firmware | * |
| supermicro | x13san-c_firmware | * |
| supermicro | h12ssff-an6_firmware | * |
| supermicro | h13ssw_firmware | * |
| supermicro | x12scz-f_firmware | * |
| supermicro | x13deg-oa_firmware | * |
| supermicro | x12dpt-pt6_firmware | * |
| supermicro | x12dpg-ar_firmware | * |
| supermicro | x11dpt-bh_firmware | * |
| supermicro | x12dpi-n6_firmware | * |
| supermicro | x11sdw-12c-tp13f_firmware | * |
| supermicro | h12dgo-6_firmware | * |
| supermicro | h13dsg-om_firmware | * |
| supermicro | x13sem-f_firmware | * |
| supermicro | c9x299-pgf-l_firmware | * |
| supermicro | x11sdc-8c_firmware | * |
| supermicro | m11sdv-8c-ln4f_firmware | * |
| supermicro | x12dpg-qr_firmware | * |
| supermicro | h13dsg-o-cpu-d_firmware | * |
| supermicro | x11sdc-4c_firmware | * |
| supermicro | x11ssv-m4_firmware | * |
| supermicro | x12dhm-6_firmware | * |
| supermicro | x11ssn-h-001_firmware | * |
| supermicro | x11ssn-h-vdc_firmware | * |
| supermicro | x11ssz-tln4f_firmware | * |
| supermicro | x11scv-q_firmware | * |
| supermicro | x11scv-l_firmware | * |
| supermicro | h12dsi-nt6_firmware | * |
| supermicro | x12dgq-r_firmware | * |
| supermicro | x12stn-c-wohs_firmware | * |
| supermicro | x12spa-tf_firmware | * |
| supermicro | x11dsf-e_firmware | * |
| supermicro | x11swn-l-wohs_firmware | * |
| supermicro | h12ssw-in_firmware | * |
| supermicro | x11scd-f_firmware | * |
| supermicro | c9x299-rpgf-l_firmware | * |
| supermicro | b13see-cpu-25g_firmware | * |
| supermicro | x11ssl-cf_firmware | * |
| supermicro | x12dpg-u6_firmware | * |
| supermicro | x11sdv-16c-tln2f_firmware | * |
| supermicro | h12ssl-nt_firmware | * |
| supermicro | x11swn-c_firmware | * |
| supermicro | x13srn-h-wohs_firmware | * |
| supermicro | x11ssa-f_firmware | * |
| supermicro | x12sped-f_firmware | * |
| supermicro | x13san-e-wohs_firmware | * |
| supermicro | b12spe-cpu-25g_firmware | * |
| supermicro | h12ssw-ntr_firmware | * |
| supermicro | x11san-wohs_firmware | * |
| supermicro | h12ssw-ntl_firmware | * |
| supermicro | x11sds-12c_firmware | * |
| supermicro | b13det_firmware | * |
| supermicro | h12dsu-in_firmware | * |
| supermicro | x12sdv-4c-spt8f_firmware | * |
| supermicro | h13dsh_firmware | * |
| supermicro | x13seed-sf_firmware | * |
| supermicro | h12dsi-n6_firmware | * |
| supermicro | x12sdv-4c-sp6f_firmware | * |
| supermicro | x11sdv-16c+-tln2f_firmware | * |
| supermicro | x11sat-f_firmware | * |
| supermicro | h12ssw-inl_firmware | * |
| supermicro | x11spw-ctf_firmware | * |
| supermicro | x11sca-f_firmware | * |
| supermicro | h12dsg-o-cpu_firmware | * |
| supermicro | x11sra-rf_firmware | * |
| supermicro | x12spz-ln4f_firmware | * |
| supermicro | x11sdv-8c+-tln2f_firmware | * |
| supermicro | b13seg_firmware | * |
| supermicro | x11sat_firmware | * |
| supermicro | x11sae_firmware | * |
| supermicro | x12sdv-14c-spt8f_firmware | * |
| supermicro | h13sae-mf_firmware | * |
| supermicro | x13san-l_firmware | * |
| supermicro | x11dpd-m25_firmware | * |
| supermicro | x12spo-f_firmware | * |
| supermicro | x12sdv-8c-sp6f_firmware | * |
| supermicro | x12stn-e_firmware | * |
| supermicro | x12dpg-oa6-gd2_firmware | * |
| supermicro | x12spm-tf_firmware | * |
| supermicro | x11dpu-z+_firmware | * |
| supermicro | x12dpg-qt6_firmware | * |
| supermicro | x12stw-tf_firmware | * |
| supermicro | x11sse-f_firmware | * |
| supermicro | h13sra-tf_firmware | * |
| supermicro | x11dac_firmware | * |
| supermicro | x12dpt-b6_firmware | * |
| supermicro | h12ssl-c_firmware | * |
| supermicro | h12ssw-nt_firmware | * |
| supermicro | x11sca-w_firmware | * |
| supermicro | x13san-l-wohs_firmware | * |
| supermicro | x12dgu_firmware | * |
| supermicro | x11dpg-sn_firmware | * |
| supermicro | x11dpff-snr_firmware | * |
| supermicro | x11swn-h-wohs_firmware | * |
| supermicro | x11dsc_firmware | * |
| supermicro | x11sra_firmware | * |
| supermicro | x11dpu_firmware | * |
| supermicro | x12spt-pt_firmware | * |
| supermicro | x11opi-cpu-cl_firmware | * |
| supermicro | b13dee_firmware | * |
| supermicro | x11scz-q_firmware | * |
| supermicro | x11sce-f_firmware | * |
| supermicro | x13srn-e-wohs_firmware | * |
| supermicro | x12qch+_firmware | * |
| supermicro | x11ssv-lvds_firmware | * |
| supermicro | x13saz-f_firmware | * |
| supermicro | x13dei_firmware | * |
| supermicro | x12sdv-8ce-sp4f_firmware | * |
| supermicro | x12dpt-pt46_firmware | * |
| supermicro | x11ssm_firmware | * |
| supermicro | m11sdv-4c-ln4f_firmware | * |
| supermicro | x13seed-f_firmware | * |
| supermicro | x12sdv-10c-spt4f_firmware | * |
| supermicro | x13sav-lvds_firmware | * |
| supermicro | x12scv-w_firmware | * |
| supermicro | x11ssl-nf_firmware | * |
| supermicro | x13sav-ps_firmware | * |
| supermicro | x11scm-ln8f_firmware | * |
| supermicro | x11dps-re_firmware | * |
| supermicro | x11scl-f_firmware | * |
| supermicro | x11spm-f_firmware | * |
| supermicro | x11dpg-hgx2_firmware | * |
| supermicro | x11dpg-qt_firmware | * |
| supermicro | x12sth-ln4f_firmware | * |
| supermicro | x11spg-tf_firmware | * |
| supermicro | x11ssq-l_firmware | * |
| supermicro | h13svw-n_firmware | * |
| supermicro | x13srn-e_firmware | * |
| supermicro | x11sdw-14cnt-tp13f_firmware | * |
| supermicro | x11spd-f_firmware | * |
| supermicro | x11ssv-q_firmware | * |
| supermicro | x11dpu-v_firmware | * |
| supermicro | x11ssn-h-wohs_firmware | * |
| supermicro | x11ssw-f_firmware | * |
| supermicro | x11swn-l_firmware | * |
| supermicro | x13deg-qt_firmware | * |
| supermicro | x12spg-nf_firmware | * |
| supermicro | x13dem_firmware | * |
| supermicro | x12ste-f_firmware | * |
| supermicro | x11sdw-16c-tp13f+_firmware | * |
| supermicro | x13sei-tf_firmware | * |
| supermicro | x12spi-tf_firmware | * |
| supermicro | x11spi-tf_firmware | * |
| supermicro | x11dpu-ze+_firmware | * |
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 1.8 | 5.9 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11scm-ln8f_firmware | - |
| supermicro | x13deg-qt_firmware | - |
| supermicro | x13sem-tf_firmware | - |
| supermicro | x12sdv-4c-spt4f_firmware | - |
| supermicro | x12stw-f_firmware | - |
| supermicro | x12spt-g_firmware | - |
| supermicro | x13san-h_firmware | - |
| supermicro | h13ssf_firmware | - |
| supermicro | x12scz-f_firmware | - |
| supermicro | h12ssw-inr_firmware | - |
| supermicro | x11scl-ln4f_firmware | - |
| supermicro | x12dpg-u6_firmware | - |
| supermicro | x12sdv-14c-spt8f_firmware | - |
| supermicro | x13dem_firmware | - |
| supermicro | x12scz-qf_firmware | - |
| supermicro | x11scd-f_firmware | - |
| supermicro | x13set-gc_firmware | - |
| supermicro | x11ssz-f_firmware | - |
| supermicro | x11ssw-f_firmware | - |
| supermicro | x12scz-tln4f_firmware | - |
| supermicro | x12spt-pt_firmware | - |
| supermicro | h12sst-ps_firmware | - |
| supermicro | h12ssw-ntl_firmware | - |
| supermicro | x11sch-ln4f_firmware | - |
| supermicro | x11ssh-tf_firmware | - |
| supermicro | x11dpu-z+_firmware | - |
| supermicro | x11srl-f_firmware | - |
| supermicro | h12ssff-an6_firmware | - |
| supermicro | x12spo-f_firmware | - |
| supermicro | x12dpg-oa6-gd2_firmware | - |
| supermicro | x11sds-16c_firmware | - |
| supermicro | x12scq_firmware | - |
| supermicro | x11dpg-ot-cpu_firmware | - |
| supermicro | x11sch-f_firmware | - |
| supermicro | x12dpl-nt6_firmware | - |
| supermicro | x11ssv_firmware | - |
| supermicro | x13deg-oa_firmware | - |
| supermicro | h12dsg-o-cpu_firmware | - |
| supermicro | x12sdv-10c-spt4f_firmware | - |
| supermicro | h13sst-g_firmware | - |
| supermicro | x11dpl-i_firmware | - |
| supermicro | x12sdv-20c-spt8f_firmware | - |
| supermicro | x12stl-if_firmware | - |
| supermicro | x13sefr-a_firmware | - |
| supermicro | x12dpl-i6_firmware | - |
| supermicro | x12dpfr-an6_firmware | - |
| supermicro | h11dsi-nt_firmware | - |
| supermicro | x12dpg-oa6_firmware | - |
| supermicro | x11dpu-xll_firmware | - |
| supermicro | x11dph-t_firmware | - |
| supermicro | x13dsf-a_firmware | - |
| supermicro | x11sae_m_firmware | - |
| supermicro | x13dgu_firmware | - |
| supermicro | x13sedw-f_firmware | - |
| supermicro | x11opi-cpu_firmware | - |
| supermicro | x11ssl-f_firmware | - |
| supermicro | h13dsh_firmware | - |
| supermicro | h12dsu-inr_firmware | - |
| supermicro | x11ssh-gtf-1585l_firmware | - |
| supermicro | h13ssw_firmware | - |
| supermicro | x12sdv-16c-spt8f_firmware | - |
| supermicro | x12spi-tf_firmware | - |
| supermicro | h12ssl-i_firmware | - |
| supermicro | x12dpu-6_firmware | - |
| supermicro | x13san-l_firmware | - |
| supermicro | x11dpg-sn_firmware | - |
| supermicro | x12spz-spln6f_firmware | - |
| supermicro | x11dph-tq_firmware | - |
| supermicro | x11ssh-ctf_firmware | - |
| supermicro | h12dgo-6_firmware | - |
| supermicro | x11srm_firmware | - |
| supermicro | x13sei-tf_firmware | - |
| supermicro | x12spt-gc_firmware | - |
| supermicro | x11dsn-tsq_firmware | - |
| supermicro | x11ssl-cf_firmware | - |
| supermicro | x12dpt-pt6_firmware | - |
| supermicro | x11spi-tf_firmware | - |
| supermicro | h13sae-mf_firmware | - |
| supermicro | x13sew-tf_firmware | - |
| supermicro | x12spg-nf_firmware | - |
| supermicro | x11dpx-t_firmware | - |
| supermicro | x11ssh-gf-1585l_firmware | - |
| supermicro | h12dsi-n6_firmware | - |
| supermicro | x11dsn-ts_firmware | - |
| supermicro | x11spw-tf_firmware | - |
| supermicro | x12stl-f_firmware | - |
| supermicro | x13san-c_firmware | - |
| supermicro | x13sei-f_firmware | - |
| supermicro | x12sca-5f_firmware | - |
| supermicro | x11sdd-18c-f_firmware | - |
| supermicro | x13srn-e_firmware | - |
| supermicro | x11ssw-tf_firmware | - |
| supermicro | h12ssw-inl_firmware | - |
| supermicro | x13dei_firmware | - |
| supermicro | h13dsg-o-cpu_firmware | - |
| supermicro | x12stn-e-wohs_firmware | - |
| supermicro | x11sri-if_firmware | - |
| supermicro | x11sph-nctpf_firmware | - |
| supermicro | h13dsg-o-cpu-d_firmware | - |
| supermicro | x11dpu-x_firmware | - |
| supermicro | x12sdv-4c-spt8f_firmware | - |
| supermicro | x11dai-n_firmware | - |
| supermicro | x12dpt-b6_firmware | - |
| supermicro | x13saq_firmware | - |
| supermicro | h13ssl-n_firmware | - |
| supermicro | x13deg-oad_firmware | - |
| supermicro | h12ssfr-an6_firmware | - |
| supermicro | x11dpg-qt_firmware | - |
| supermicro | x12sdv-10c-sp6f_firmware | - |
| supermicro | x12dpi-n6_firmware | - |
| supermicro | x11ssm_firmware | - |
| supermicro | x13sem-f_firmware | - |
| supermicro | x13dai-t_firmware | - |
| supermicro | x11dgq_firmware | - |
| supermicro | x11dpi-n_firmware | - |
| supermicro | x11sca_firmware | - |
| supermicro | x11sds-8c_firmware | - |
| supermicro | x11dpfr-sn_firmware | - |
| supermicro | x11sca-w_firmware | - |
| supermicro | x12sdv-8ce-sp4f_firmware | - |
| supermicro | x11dpu-ze+_firmware | - |
| supermicro | x12dai-n6_firmware | - |
| supermicro | x13dei-t_firmware | - |
| supermicro | h13sst-gc_firmware | - |
| supermicro | x11ddw-nt_firmware | - |
| supermicro | x12dhm-6_firmware | - |
| supermicro | x12stn-c_firmware | - |
| supermicro | h12ssl-nt_firmware | - |
| supermicro | x13sra-tf_firmware | - |
| supermicro | x12stn-l-wohs_firmware | - |
| supermicro | x11scl-if_firmware | - |
| supermicro | x11ssz_firmware | - |
| supermicro | x13sae-f_firmware | - |
| supermicro | x11ssi-ln4f_firmware | - |
| supermicro | x12stn-c-wohs_firmware | - |
| supermicro | x12sth-sys_firmware | - |
| supermicro | x12spl-ln4f_firmware | - |
| supermicro | x11dph-i_firmware | - |
| supermicro | x11scm-f_firmware | - |
| supermicro | x12dgo-6_firmware | - |
| supermicro | x11srm-f_firmware | - |
| supermicro | h12ssg-anp6_firmware | - |
| supermicro | x13san-l-wohs_firmware | - |
| supermicro | x13ddw-a_firmware | - |
| supermicro | x11qph+_firmware | - |
| supermicro | x11ssl_firmware | - |
| supermicro | x12scv-lvds_firmware | - |
| supermicro | h11dsi_firmware | - |
| supermicro | h12dgq-nt6_firmware | - |
| supermicro | x11sse-f_firmware | - |
| supermicro | h12ssw-in_firmware | - |
| supermicro | h13ssl-nt_firmware | - |
| supermicro | x11ssh-ln4f_firmware | - |
| supermicro | x12stn-h-wohs_firmware | - |
| supermicro | x11dpt-l_firmware | - |
| supermicro | x13sav-lvds_firmware | - |
| supermicro | h11dsu-in_firmware | - |
| supermicro | x11ssl-nf_firmware | - |
| supermicro | x12spw-tf_firmware | - |
| supermicro | x12qch+_firmware | - |
| supermicro | x12scv-w_firmware | - |
| supermicro | x11spm-f_firmware | - |
| supermicro | h13srd-f_firmware | - |
| supermicro | x11spl-f_firmware | - |
| supermicro | x12spm-ln6tf_firmware | - |
| supermicro | x11sds-12c_firmware | - |
| supermicro | h12dsi-nt6_firmware | - |
| supermicro | x11dpi-nt_firmware | - |
| supermicro | x12dpg-qt6_firmware | - |
| supermicro | x12spl-f_firmware | - |
| supermicro | x12spm-tf_firmware | - |
| supermicro | x12dpi-nt6_firmware | - |
| supermicro | x13seed-f_firmware | - |
| supermicro | x11dac_firmware | - |
| supermicro | x11ssn_firmware | - |
| supermicro | x11ssw-4tf_firmware | - |
| supermicro | x11ssz-tln4f_firmware | - |
| supermicro | x13srn-h_firmware | - |
| supermicro | x13san-h-wohs_firmware | - |
| supermicro | x12ste-f_firmware | - |
| supermicro | x12spw-f_firmware | - |
| supermicro | x12sdv-8c-spt8f_firmware | - |
| supermicro | h12ssl-ct_firmware | - |
| supermicro | x11srm-vf_firmware | - |
| supermicro | x13deg-pvc_firmware | - |
| supermicro | x13sae_firmware | - |
| supermicro | x12sped-f_firmware | - |
| supermicro | h12ssg-an6_firmware | - |
| supermicro | x11spw-ctf_firmware | - |
| supermicro | x11dsc+_firmware | - |
| supermicro | x12spo-ntf_firmware | - |
| supermicro | x11ssql_firmware | - |
| supermicro | x11dpt-ps_firmware | - |
| supermicro | x12sca-f_firmware | - |
| supermicro | x12spm-ln4f_firmware | - |
| supermicro | x12dpg-ar_firmware | - |
| supermicro | x11ddw-l_firmware | - |
| supermicro | x11dpu-v_firmware | - |
| supermicro | x12spz-ln4f_firmware | - |
| supermicro | x11dpt-b_firmware | - |
| supermicro | x11ssv-lvds_firmware | - |
| supermicro | h13ssh_firmware | - |
| supermicro | x12sae_firmware | - |
| supermicro | x12stw-tf_firmware | - |
| supermicro | x11sae_firmware | - |
| supermicro | x11dpfr-s_firmware | - |
| supermicro | x11scw-f_firmware | - |
| supermicro | x11dpt-bh_firmware | - |
| supermicro | x11dsf-e_firmware | - |
| supermicro | x11sba_firmware | - |
| supermicro | x11spg-tf_firmware | - |
| supermicro | x13det-b_firmware | - |
| supermicro | x11ssv-q_firmware | - |
| supermicro | x12stn-h_firmware | - |
| supermicro | x11sph-nctf_firmware | - |
| supermicro | x12dpd-a6m25_firmware | - |
| supermicro | x13set-g_firmware | - |
| supermicro | x13san-e-wohs_firmware | - |
| supermicro | x12dpg-qr_firmware | - |
| supermicro | x12sdv-8c-sp6f_firmware | - |
| supermicro | x12sth-f_firmware | - |
| supermicro | x11ssm-f_firmware | - |
| supermicro | x12ddw-a6_firmware | - |
| supermicro | x11dpff-sn_firmware | - |
| supermicro | x12dsc-6_firmware | - |
| supermicro | x11ssd-f_firmware | - |
| supermicro | x12spa-tf_firmware | - |
| supermicro | x13srn-e-wohs_firmware | - |
| supermicro | x13san-c-wohs_firmware | - |
| supermicro | x13qeh+_firmware | - |
| supermicro | x11spm-tf_firmware | - |
| supermicro | x12sae-5_firmware | - |
| supermicro | h12ssl-c_firmware | - |
| supermicro | x12dpt-pt46_firmware | - |
| supermicro | x11sat_firmware | - |
| supermicro | x11dgo-t_firmware | - |
| supermicro | x11spa-t_firmware | - |
| supermicro | h12dst-b_firmware | - |
| supermicro | x12dgu_firmware | - |
| supermicro | h12ssw-an6_firmware | - |
| supermicro | x11ssh-f_firmware | - |
| supermicro | x13san-e_firmware | - |
| supermicro | h12dsg-q-cpu6_firmware | - |
| supermicro | x11ssq_firmware | - |
| supermicro | x12stn-e_firmware | - |
| supermicro | x13saz-f_firmware | - |
| supermicro | x11spm-tpf_firmware | - |
| supermicro | x11dpu_firmware | - |
| supermicro | x11sra_firmware | - |
| supermicro | x11spa-tf_firmware | - |
| supermicro | x12sdv-8c-spt4f_firmware | - |
| supermicro | x11dps-re_firmware | - |
| supermicro | x13sav-ps_firmware | - |
| supermicro | x12dpg-qbt6_firmware | - |
| supermicro | x11scl-f_firmware | - |
| supermicro | h12ssw-ntr_firmware | - |
| supermicro | x11sdd-8c-f_firmware | - |
| supermicro | x12sth-ln4f_firmware | - |
| supermicro | x12stn-l_firmware | - |
| supermicro | x13saz-q_firmware | - |
| supermicro | h12dsu-in_firmware | - |
| supermicro | x12dgq-r_firmware | - |
| supermicro | x13seed-sf_firmware | - |
| supermicro | h11dst-b_firmware | - |
| supermicro | x12std-f_firmware | - |
| supermicro | x11sca-f_firmware | - |
| supermicro | x11ssh-gtf-1585_firmware | - |
| supermicro | h12ssw-nt_firmware | - |
| supermicro | x12sdv-4c-sp6f_firmware | - |
| supermicro | x11ssh-gf-1585_firmware | - |
| supermicro | x13sew-f_firmware | - |
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | h12ssg-anp6_firmware | - |
| supermicro | x13san-l-wohs_firmware | - |
| supermicro | h12dst-b_firmware | * |
| supermicro | x13ddw-a_firmware | - |
| supermicro | x13deg-qt_firmware | - |
| supermicro | x13sem-tf_firmware | - |
| supermicro | x12sdv-4c-spt4f_firmware | - |
| supermicro | x12scv-lvds_firmware | - |
| supermicro | x12stw-f_firmware | - |
| supermicro | x12spt-g_firmware | - |
| supermicro | x13san-h_firmware | - |
| supermicro | h12dgq-nt6_firmware | - |
| supermicro | h12ssw-in_firmware | - |
| supermicro | h13ssf_firmware | - |
| supermicro | x12scz-f_firmware | - |
| supermicro | h12ssw-inr_firmware | - |
| supermicro | x13srn-h-wohs_firmware | - |
| supermicro | x12dpg-u6_firmware | - |
| supermicro | x12sdv-14c-spt8f_firmware | - |
| supermicro | x13dem_firmware | - |
| supermicro | h13ssl-nt_firmware | - |
| supermicro | x12scz-qf_firmware | - |
| supermicro | x13set-gc_firmware | - |
| supermicro | x12stn-h-wohs_firmware | - |
| supermicro | x13sav-lvds_firmware | - |
| supermicro | x12scz-tln4f_firmware | - |
| supermicro | x12spw-tf_firmware | - |
| supermicro | x12qch+_firmware | - |
| supermicro | x12spt-pt_firmware | - |
| supermicro | x12scv-w_firmware | - |
| supermicro | h12sst-ps_firmware | - |
| supermicro | h13srd-f_firmware | - |
| supermicro | h12ssw-ntl_firmware | - |
| supermicro | x12spm-ln6tf_firmware | - |
| supermicro | h12dsi-nt6_firmware | - |
| supermicro | h12ssff-an6_firmware | - |
| supermicro | x12dpg-qt6_firmware | - |
| supermicro | x12spl-f_firmware | - |
| supermicro | x12spm-tf_firmware | - |
| supermicro | x12spo-f_firmware | - |
| supermicro | x12dpg-oa6-gd2_firmware | - |
| supermicro | x12dpi-nt6_firmware | - |
| supermicro | x12scq_firmware | - |
| supermicro | x12dpl-nt6_firmware | - |
| supermicro | x13seed-f_firmware | - |
| supermicro | x13deg-oa_firmware | - |
| supermicro | h12dsg-o-cpu_firmware | - |
| supermicro | x12sdv-10c-spt4f_firmware | - |
| supermicro | x13srn-h_firmware | - |
| supermicro | h13sst-g_firmware | - |
| supermicro | x12sdv-20c-spt8f_firmware | - |
| supermicro | x12stl-if_firmware | - |
| supermicro | x13san-h-wohs_firmware | - |
| supermicro | x13sefr-a_firmware | - |
| supermicro | x12dpl-i6_firmware | - |
| supermicro | x12ste-f_firmware | - |
| supermicro | x12spw-f_firmware | - |
| supermicro | x12dpfr-an6_firmware | - |
| supermicro | x12sdv-8c-spt8f_firmware | - |
| supermicro | h12ssl-ct_firmware | - |
| supermicro | x12dpg-oa6_firmware | - |
| supermicro | x13deg-pvc_firmware | - |
| supermicro | x13sae_firmware | - |
| supermicro | x12sped-f_firmware | - |
| supermicro | x13dsf-a_firmware | - |
| supermicro | h12ssg-an6_firmware | - |
| supermicro | x13dgu_firmware | - |
| supermicro | x12spo-ntf_firmware | - |
| supermicro | x13sedw-f_firmware | - |
| supermicro | h13dsh_firmware | - |
| supermicro | h12dsu-inr_firmware | - |
| supermicro | x12sca-f_firmware | - |
| supermicro | x12spm-ln4f_firmware | - |
| supermicro | x12dpg-ar_firmware | - |
| supermicro | h13ssw_firmware | - |
| supermicro | x12sdv-16c-spt8f_firmware | - |
| supermicro | x12spi-tf_firmware | - |
| supermicro | h12ssl-i_firmware | - |
| supermicro | x12spz-ln4f_firmware | - |
| supermicro | x12dpu-6_firmware | - |
| supermicro | x13san-l_firmware | - |
| supermicro | x12spz-spln6f_firmware | - |
| supermicro | h13ssh_firmware | - |
| supermicro | x12sae_firmware | - |
| supermicro | h12dgo-6_firmware | - |
| supermicro | x13sei-tf_firmware | - |
| supermicro | x12stw-tf_firmware | - |
| supermicro | x12spt-gc_firmware | - |
| supermicro | x12dpt-pt6_firmware | - |
| supermicro | h13sae-mf_firmware | - |
| supermicro | x13sew-tf_firmware | - |
| supermicro | x13det-b_firmware | - |
| supermicro | x12spg-nf_firmware | - |
| supermicro | x12stn-h_firmware | - |
| supermicro | h12dsi-n6_firmware | - |
| supermicro | x12stl-f_firmware | - |
| supermicro | x13san-c_firmware | - |
| supermicro | x13sei-f_firmware | - |
| supermicro | x12sca-5f_firmware | - |
| supermicro | x12dpd-a6m25_firmware | - |
| supermicro | x13srn-e_firmware | - |
| supermicro | h12ssw-inl_firmware | - |
| supermicro | x13dei_firmware | - |
| supermicro | h13dsg-o-cpu_firmware | - |
| supermicro | x13set-g_firmware | - |
| supermicro | x12stn-e-wohs_firmware | - |
| supermicro | x13san-e-wohs_firmware | - |
| supermicro | x12dpg-qr_firmware | - |
| supermicro | h13dsg-o-cpu-d_firmware | - |
| supermicro | x12sdv-8c-sp6f_firmware | - |
| supermicro | x12sth-f_firmware | - |
| supermicro | x12ddw-a6_firmware | - |
| supermicro | x12sdv-4c-spt8f_firmware | - |
| supermicro | x12dsc-6_firmware | - |
| supermicro | x12dpt-b6_firmware | - |
| supermicro | x12spa-tf_firmware | - |
| supermicro | x13srn-e-wohs_firmware | - |
| supermicro | x13san-c-wohs_firmware | - |
| supermicro | x13qeh+_firmware | - |
| supermicro | x13swa-tf_firmware | - |
| supermicro | x13saq_firmware | - |
| supermicro | h13ssl-n_firmware | - |
| supermicro | x13deg-oad_firmware | - |
| supermicro | x12sae-5_firmware | - |
| supermicro | h12ssl-c_firmware | - |
| supermicro | h12ssfr-an6_firmware | - |
| supermicro | x12dpt-pt46_firmware | - |
| supermicro | x12sdv-10c-sp6f_firmware | - |
| supermicro | x12dpi-n6_firmware | - |
| supermicro | h12dst-b_firmware | - |
| supermicro | x12dgu_firmware | - |
| supermicro | h12ssw-an6_firmware | - |
| supermicro | x13sem-f_firmware | - |
| supermicro | x13dai-t_firmware | - |
| supermicro | x13san-e_firmware | - |
| supermicro | h12dsg-q-cpu6_firmware | - |
| supermicro | x12stn-e_firmware | - |
| supermicro | x12sdv-8ce-sp4f_firmware | - |
| supermicro | x12dai-n6_firmware | - |
| supermicro | x13dei-t_firmware | - |
| supermicro | x13saz-f_firmware | - |
| supermicro | h13sst-gc_firmware | - |
| supermicro | x12dhm-6_firmware | - |
| supermicro | x12stn-c_firmware | - |
| supermicro | h12ssl-nt_firmware | - |
| supermicro | x13sra-tf_firmware | - |
| supermicro | x12sdv-8c-spt4f_firmware | - |
| supermicro | x12stn-l-wohs_firmware | - |
| supermicro | x13sav-ps_firmware | - |
| supermicro | x12dpg-qbt6_firmware | - |
| supermicro | x13sae-f_firmware | - |
| supermicro | x12stn-c-wohs_firmware | - |
| supermicro | h12ssw-ntr_firmware | - |
| supermicro | x12sth-ln4f_firmware | - |
| supermicro | x12stn-l_firmware | - |
| supermicro | x12sth-sys_firmware | - |
| supermicro | x12spl-ln4f_firmware | - |
| supermicro | x13saz-q_firmware | - |
| supermicro | h12dsu-in_firmware | - |
| supermicro | x12dgq-r_firmware | - |
| supermicro | x13seed-sf_firmware | - |
| supermicro | x12std-f_firmware | - |
| supermicro | h12ssw-nt_firmware | - |
| supermicro | x12sdv-4c-sp6f_firmware | - |
| supermicro | x12dgo-6_firmware | - |
| supermicro | x13sew-f_firmware | - |
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11sae-f_firmware | 1.66 |
| supermicro | x11sse-f_firmware | 1.66 |
| supermicro | x11ssm-f_firmware | 1.66 |
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11sae-f_firmware | 1.66 |
| supermicro | x11sse-f_firmware | 1.66 |
| supermicro | x11ssm-f_firmware | 1.66 |
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11sae-f_firmware | 1.66 |
| supermicro | x11sse-f_firmware | 1.66 |
| supermicro | x11ssm-f_firmware | 1.66 |
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11sae-f_firmware | 1.66 |
| supermicro | x11sse-f_firmware | 1.66 |
| supermicro | x11ssm-f_firmware | 1.66 |
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11sae-f_firmware | 1.66 |
| supermicro | x11sse-f_firmware | 1.66 |
| supermicro | x11ssm-f_firmware | 1.66 |
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11sae-f_firmware | 1.66 |
| supermicro | x11sse-f_firmware | 1.66 |
| supermicro | x11ssm-f_firmware | 1.66 |
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| supermicro | x11sae-f_firmware | 1.66 |
| supermicro | x11sse-f_firmware | 1.66 |
| supermicro | x11ssm-f_firmware | 1.66 |