Supermicro

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

Supermicro records in CISA KEV

No Supermicro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X11sse-f Firmware 14 records MEDIUM X11ssm-f Firmware 14 records MEDIUM X11sae-f Firmware 10 records MEDIUM X11dac Firmware 7 records MEDIUM X11dai-n Firmware 7 records MEDIUM X11ddw-l Firmware 7 records MEDIUM X11ddw-nt Firmware 7 records MEDIUM X11dgo-t Firmware 7 records MEDIUM

Records

14 records in X11ssm-f Firmware · all components

TI-2023-21131 CVE-2023-40289 · GHSA-92q8-mrj6-9v42

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F…

MEDIUM 51

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.18408 Published 2024-03-27 No fix listed CWE-269

TI-2019-12449 CVE-2019-16650 · GHSA-vjvg-9vgw-x699

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a…

MEDIUM 47

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02163 Published 2019-09-21 No fix listed

TI-2019-12448 CVE-2019-16649 · GHSA-w4w7-g55h-mxxx

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and…

MEDIUM 45

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devic…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00927 Published 2019-09-21 No fix listed CWE-287

TI-2023-16528 CVE-2023-33411 · GHSA-7675-h57g-r24m

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management…

MEDIUM 41

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unaut…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01279 Published 2023-12-07 No fix listed CWE-22

TI-2023-16530 CVE-2023-33413 · GHSA-wwgj-w8cg-2x8h

The configuration functionality in the Intelligent Platform Management Interface (IPMI)…

MEDIUM 40

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00959 Published 2023-12-07 No fix listed CWE-798

TI-2023-16529 CVE-2023-33412 · GHSA-283r-fx38-xwrx

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard…

MEDIUM 40

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01153 Published 2023-12-07 No fix listed

TI-2023-21132 CVE-2023-40290 · GHSA-36f2-v56q-6v2j

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00698 Published 2024-03-27 No fix listed CWE-79

TI-2023-21130 CVE-2023-40288 · GHSA-45f8-rqfm-rh3c

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00596 Published 2024-03-27 No fix listed CWE-79

TI-2023-21129 CVE-2023-40287 · GHSA-xg9v-76c9-465p

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00596 Published 2024-03-27 No fix listed CWE-79

TI-2023-21128 CVE-2023-40286 · GHSA-4grj-79m7-r238

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00601 Published 2024-03-27 No fix listed CWE-79

TI-2023-21126 CVE-2023-40284 · GHSA-3967-4r54-74c9

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00794 Published 2024-03-27 No fix listed CWE-79

TI-2023-17418 CVE-2023-34853 · GHSA-hc5f-667v-8w5w

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local…

LOW 36

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2023-08-22 No fix listed CWE-787

TI-2023-21127 CVE-2023-40285 · GHSA-326x-2xqq-45f9

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 30

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00625 Published 2024-03-27 No fix listed CWE-79

TI-2022-21143 CVE-2022-43309 · GHSA-x3g3-cjwm-fv45

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

LOW 24

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00151 Published 2023-04-07 No fix listed CWE-732

Open these records in search →