CRITICAL🇵🇱 Wersja polska

CVE-2023-35861

CVSS 9.8v3.1pub. 2023-07-31upd. 2024-11-21

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Supermicro H12dst B

    HW
    Supermicro
    all versions

  • Supermicro H12dst B Firmware

    OS
    Supermicro
    < 03.10.35

  • Supermicro H13dsg O Cpu

    HW
    Supermicro
    all versions

  • Supermicro H13dsg O Cpu D

    HW
    Supermicro
    all versions

  • Supermicro H13dsg O Cpu D Firmware

    OS
    Supermicro
    all versions

  • Supermicro H13dsg O Cpu Firmware

    OS
    Supermicro
    all versions

  • Supermicro H13dsh

    HW
    Supermicro
    all versions

  • Supermicro H13dsh Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13dai T

    HW
    Supermicro
    all versions

  • Supermicro X13dai T Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13ddw A

    HW
    Supermicro
    all versions

  • Supermicro X13ddw A Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13deg Oa

    HW
    Supermicro
    all versions

  • Supermicro X13deg Oad

    HW
    Supermicro
    all versions

  • Supermicro X13deg Oad Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13deg Oa Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13deg Pvc

    HW
    Supermicro
    all versions

  • Supermicro X13deg Pvc Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13deg Qt

    HW
    Supermicro
    all versions

  • Supermicro X13deg Qt Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13dei

    HW
    Supermicro
    all versions

  • Supermicro X13dei Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13dei T

    HW
    Supermicro
    all versions

  • Supermicro X13dei T Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13dem

    HW
    Supermicro
    all versions

  • Supermicro X13dem Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13det B

    HW
    Supermicro
    all versions

  • Supermicro X13det B Firmware

    OS
    Supermicro
    all versions

  • Supermicro X13dgu

    HW
    Supermicro
    all versions

  • Supermicro X13dgu Firmware

    OS
    Supermicro
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2023-33411HIGH7.5same product

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) imp...

CVE-2023-33412HIGH8.8same product

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC...

CVE-2023-33413HIGH8.8same product

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management c...

CVE-2019-16649CRITICAL10.0PL ✓same vendor

Supermicro BMC: przechwycenie poświadczeń przez podatny serwis virtual media

CVE-2019-16650CRITICAL10.0PL ✓same vendor

Supermicro BMC: nieuprawniony dostęp do wirtualnych urządzeń USB (USBAnywhere)