HIGH🇵🇱 Wersja polska

CVE-2023-33412

CVSS 8.8v3.1pub. 2023-12-07upd. 2026-07-09

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Supermicro B13dee

    HW
    Supermicro
    all versions

  • Supermicro B13dee Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro B13det

    HW
    Supermicro
    all versions

  • Supermicro B13det Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro B13see Cpu 25g

    HW
    Supermicro
    all versions

  • Supermicro B13see Cpu 25g Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro B13seg

    HW
    Supermicro
    all versions

  • Supermicro B13seg Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro C9x299 Pg

    HW
    Supermicro
    all versions

  • Supermicro C9x299 Pg300

    HW
    Supermicro
    all versions

  • Supermicro C9x299 Pg300f

    HW
    Supermicro
    all versions

  • Supermicro C9x299 Pg300f Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro C9x299 Pg300 Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro C9x299 Pgf

    HW
    Supermicro
    all versions

  • Supermicro C9x299 Pgf Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro C9x299 Pg Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro C9x299 Pgf L

    HW
    Supermicro
    all versions

  • Supermicro C9x299 Pgf L Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro C9x299 Rpgf

    HW
    Supermicro
    all versions

  • Supermicro C9x299 Rpgf Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro C9x299 Rpgf L

    HW
    Supermicro
    all versions

  • Supermicro C9x299 Rpgf L Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro H13dsg O Cpu

    HW
    Supermicro
    all versions

  • Supermicro H13dsg O Cpu D

    HW
    Supermicro
    all versions

  • Supermicro H13dsg O Cpu D Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro H13dsg O Cpu Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro H13dsg Om

    HW
    Supermicro
    all versions

  • Supermicro H13dsg Om Firmware

    OS
    Supermicro
    ≤ 3.17.02

  • Supermicro H13dsh

    HW
    Supermicro
    all versions

  • Supermicro H13dsh Firmware

    OS
    Supermicro
    ≤ 3.17.02
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-35861CRITICAL9.8PL ✓same product

Command injection w powiadomieniach email Supermicro BMC — wykonanie poleceń jako root

CVE-2023-33411HIGH7.5same product

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) imp...

CVE-2023-33413HIGH8.8same product

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management c...

CVE-2019-16649CRITICAL10.0PL ✓same vendor

Supermicro BMC: przechwycenie poświadczeń przez podatny serwis virtual media

CVE-2019-16650CRITICAL10.0PL ✓same vendor

Supermicro BMC: nieuprawniony dostęp do wirtualnych urządzeń USB (USBAnywhere)