Browse CVEs

HIGH 8.3 CVE-2023-40288 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. X11ssm F Firmware Mitigation only Fix from $1,9502024-03-27 HIGH 8.3 CVE-2023-40290 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Exp… X11ssm F Firmware Mitigation only Fix from $1,9502024-03-27 HIGH 7.2 CVE-2023-40289EPSS 18% A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privile… X11ssm F Firmware Mitigation only Fix from $1,9502024-03-27 HIGH 8.3 CVE-2023-40284 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. X11ssm F Firmware Mitigation only Fix from $1,9502024-03-27 HIGH 8.3 CVE-2023-40286 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. X11ssm F Firmware No fix yet Fix from $1,9502024-03-27 HIGH 8.3 CVE-2023-40287 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. X11ssm F Firmware Mitigation only Fix from $1,9502024-03-27 MEDIUM 6.5 CVE-2023-40285 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. X11ssm F Firmware Mitigation only Fix from $1,6002024-03-27 HIGH 7.8 CVE-2023-34853 Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityE… X12dai N6 Firmware Mitigation only Fix from $1,9502023-08-22 MEDIUM 5.5 CVE-2022-43309 Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions. X11ssl Cf Firmware No fix yet Fix from $1,6002023-04-07 HIGH 8.8 CVE-2020-15046 The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/config_user.cg… X10drh It Bios No fix yet Fix from $1,9502020-06-24 HIGH 8.8 CVE-2019-19642EPSS 19% On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated att… X8sti F Bios No fix yet Fix from $1,9502019-12-08 CRITICAL 10.0 CVE-2019-16649 On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows c… X11dai N Firmware Mitigation only Fix from $2,3002019-09-21 CRITICAL 10.0 CVE-2019-16650 On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descrip… X11dai N Firmware Mitigation only Fix from $2,3002019-09-21 CRITICAL 9.8 CVE-2019-13131 Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE. Superdoctor 5 No fix yet Fix from $2,3002019-07-01 MEDIUM 6.7 CVE-2018-13787 Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to mod… X11ssz Firmware Mitigation only Fix from $1,6002018-07-09 HIGH 10.0 CVE-2013-3607EPSS 10% Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*… H8dcl 6f Mitigation only Fix from $1,9502013-09-08 HIGH 10.0 CVE-2013-3608EPSS 6% The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, … H8dcl 6f Mitigation only Fix from $1,9502013-09-08 HIGH 10.0 CVE-2013-3609EPSS 5% The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, … H8dcl 6f Mitigation only Fix from $1,9502013-09-08 HIGH 10.0 CVE-2013-4782EPSS 26% The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka c… Bmc Mitigation only Fix from $1,9502013-07-08