Supermicro X11Sae F vulnerabilities
10 vulnerabilities
Known vulnerabilities in Supermicro X11Sae F, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-40290supermicrox11sae-f_firmware+2
EPSS score0.70%
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.CVE-2023-40288supermicrox11sae-f_firmware+2EPSS score0.60%
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.CVE-2023-40289supermicrox11sae-f_firmware+2EPSS score18.27%
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.CVE-2023-40284supermicrox11sae-f_firmware+2EPSS score0.79%
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.CVE-2023-40287supermicrox11sae-f_firmware+2EPSS score0.60%
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.CVE-2023-40285supermicrox11sae-f_firmware+2EPSS score0.63%
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.CVE-2023-40286supermicrox11sae-f_firmware+2EPSS score0.60%
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.CVE-2023-33413supermicrob12dpe-6_firmware+355EPSS score0.96%
The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands.CVE-2023-33411supermicrob12dpe-6_firmware+355EPSS score1.28%
A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.CVE-2023-33412supermicrob12dpe-6_firmware+355EPSS score1.15%
The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.