Priority MEDIUM 40
The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00959 · Published 2023-12-07 · No fix listed CWE-798
Priority MEDIUM 40
The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01153 · Published 2023-12-07 · No fix listed
Priority MEDIUM 41
A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unaut…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01279 · Published 2023-12-07 · No fix listed CWE-22
Priority LOW 36
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00392 · Published 2023-08-22 · No fix listed CWE-787
Priority LOW 24
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00151 · Published 2023-04-07 · No fix listed CWE-732
Priority MEDIUM 45
On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devic…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00927 · Published 2019-09-21 · No fix listed CWE-287
Priority MEDIUM 47
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.02163 · Published 2019-09-21 · No fix listed