Supermicro

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

Supermicro records in CISA KEV

No Supermicro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X11sse-f Firmware 14 records MEDIUM X11ssm-f Firmware 14 records MEDIUM X11sae-f Firmware 10 records MEDIUM X11dac Firmware 7 records MEDIUM X11dai-n Firmware 7 records MEDIUM X11ddw-l Firmware 7 records MEDIUM X11ddw-nt Firmware 7 records MEDIUM X11dgo-t Firmware 7 records MEDIUM

Records

7 records in X11dac Firmware · all components

TI-2019-12449 CVE-2019-16650 · GHSA-vjvg-9vgw-x699

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a…

MEDIUM 47

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02163 Published 2019-09-21 No fix listed

TI-2019-12448 CVE-2019-16649 · GHSA-w4w7-g55h-mxxx

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and…

MEDIUM 45

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devic…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00927 Published 2019-09-21 No fix listed CWE-287

TI-2023-16528 CVE-2023-33411 · GHSA-7675-h57g-r24m

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management…

MEDIUM 41

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unaut…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01279 Published 2023-12-07 No fix listed CWE-22

TI-2023-16530 CVE-2023-33413 · GHSA-wwgj-w8cg-2x8h

The configuration functionality in the Intelligent Platform Management Interface (IPMI)…

MEDIUM 40

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00959 Published 2023-12-07 No fix listed CWE-798

TI-2023-16529 CVE-2023-33412 · GHSA-283r-fx38-xwrx

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard…

MEDIUM 40

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01153 Published 2023-12-07 No fix listed

TI-2023-17418 CVE-2023-34853 · GHSA-hc5f-667v-8w5w

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local…

LOW 36

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2023-08-22 No fix listed CWE-787

TI-2022-21143 CVE-2022-43309 · GHSA-x3g3-cjwm-fv45

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

LOW 24

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00151 Published 2023-04-07 No fix listed CWE-732

Open these records in search →

Critical	10
High	14
Medium	5
Low	1
No CVSS	0