Vulnerabilities

Filters

Reset all

1 selected

30 records

Sort

Vendor: Supermicro Clear all filters

TI-2024-07516 CVE-2024-8105 · GHSA-5xg9-v43g-xgcj

Insecure Platform Key (PK) used in UEFI system firmware signature

MEDIUM 64

A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK).

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00274 Published 2024-08-26 Fixed in 0

TI-2023-21132 CVE-2023-40290 · GHSA-36f2-v56q-6v2j

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00698 Published 2024-03-27 No fix listed CWE-79

TI-2023-21131 CVE-2023-40289 · GHSA-92q8-mrj6-9v42

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F…

MEDIUM 51

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.18408 Published 2024-03-27 No fix listed CWE-269

TI-2023-21130 CVE-2023-40288 · GHSA-45f8-rqfm-rh3c

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00596 Published 2024-03-27 No fix listed CWE-79

TI-2023-21129 CVE-2023-40287 · GHSA-xg9v-76c9-465p

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00596 Published 2024-03-27 No fix listed CWE-79

TI-2023-21128 CVE-2023-40286 · GHSA-4grj-79m7-r238

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00601 Published 2024-03-27 No fix listed CWE-79

TI-2023-21127 CVE-2023-40285 · GHSA-326x-2xqq-45f9

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 30

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00625 Published 2024-03-27 No fix listed CWE-79

TI-2023-21126 CVE-2023-40284 · GHSA-3967-4r54-74c9

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

LOW 39

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00794 Published 2024-03-27 No fix listed CWE-79

TI-2023-16530 CVE-2023-33413 · GHSA-wwgj-w8cg-2x8h

The configuration functionality in the Intelligent Platform Management Interface (IPMI)…

MEDIUM 40

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00959 Published 2023-12-07 No fix listed CWE-798

TI-2023-16529 CVE-2023-33412 · GHSA-283r-fx38-xwrx

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard…

MEDIUM 40

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01153 Published 2023-12-07 No fix listed

TI-2023-16528 CVE-2023-33411 · GHSA-7675-h57g-r24m

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management…

MEDIUM 41

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unaut…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01279 Published 2023-12-07 No fix listed CWE-22

TI-2023-17418 CVE-2023-34853 · GHSA-hc5f-667v-8w5w

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local…

LOW 36

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2023-08-22 No fix listed CWE-787

TI-2023-17936 CVE-2023-35861 · GHSA-qg5r-gm88-j987

A shell-injection vulnerability in email notifications on Supermicro motherboards (such…

HIGH 82

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02108 Published 2023-07-31 No fix listed CWE-78

TI-2022-21143 CVE-2022-43309 · GHSA-x3g3-cjwm-fv45

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

LOW 24

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00151 Published 2023-04-07 No fix listed CWE-732

TI-2021-05748 CVE-2021-22887 · GHSA-gpmr-cr86-wc6h

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and…

LOW 12

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware.

CVSS 3.1LOW 2.3 Local High privileges No interaction EPSS 0.00276 Published 2021-03-16 No fix listed CWE-506

TI-2020-11828 CVE-2020-15046 · GHSA-rmxm-6j87-8r3p

The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware…

MEDIUM 42

The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/config_user.cgi CSRF issue to add new admin users.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02296 Published 2020-06-24 No fix listed CWE-352

TI-2013-05577 CVE-2013-6785 · GHSA-4gj7-vvp2-fcxc

Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before…

LOW 27

Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.04356 Published 2020-01-23 No fix listed CWE-22

TI-2013-03163 CVE-2013-3620 · GHSA-f9jf-2mqx-xf55

Insufficiently protected credentials in Supermicro IPMI

LOW 39

Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards befo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0363 Published 2020-01-02 No fix listed CWE-522

TI-2013-03162 CVE-2013-3619 · GHSA-9x36-hp8r-pf6p

Hard-coded credentials in Supermicro IPMI

MEDIUM 47

Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.09688 Published 2020-01-02 No fix listed CWE-798

TI-2019-14153 CVE-2019-19642 · GHSA-8rgw-25fw-5m5f

On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual…

MEDIUM 56

On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.19039 Published 2019-12-08 No fix listed CWE-78

TI-2019-12448 CVE-2019-16649 · GHSA-w4w7-g55h-mxxx

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and…

MEDIUM 45

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devic…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00927 Published 2019-09-21 No fix listed CWE-287

TI-2019-12449 CVE-2019-16650 · GHSA-vjvg-9vgw-x699

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a…

MEDIUM 47

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02163 Published 2019-09-21 No fix listed

TI-2019-09835 CVE-2019-13131 · GHSA-jwjw-4hrm-4cgg

Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows…

MEDIUM 48

Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03578 Published 2019-07-01 No fix listed CWE-306

TI-2018-10000 CVE-2018-13787 · GHSA-x8pf-7q32-5293

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a…

LOW 30

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00417 Published 2018-07-09 No fix listed

TI-2013-03165 CVE-2013-3623 · GHSA-72g2-p7rm-v72h

Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the…

HIGH 81

Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.72375 Published 2013-12-10 No fix listed CWE-119