CVE-2023-33412

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.

• supermicro m11sdv-4c-ln4f firmware (<= 3.17.02) • supermicro m11sdv-4ct-ln4f firmware (<= 3.17.02) • supermicro m11sdv-8c-ln4f firmware (<= 3.17.02) • supermicro m11sdv-8ct-ln4f firmware (<= 3.17.02) • supermicro m11sdv-8c\+-ln4f firmware (<= 3.17.02) • supermicro c9x299-pg firmware (<= 3.17.02) • supermicro c9x299-pg300 firmware (<= 3.17.02) • supermicro c9x299-pg300f firmware (<= 3.17.02) • supermicro c9x299-pgf firmware (<= 3.17.02) • supermicro c9x299-pgf-l firmware (<= 3.17.02) • supermicro c9x299-rpgf firmware (<= 3.17.02) • supermicro c9x299-rpgf-l firmware (<= 3.17.02) • supermicro b13dee firmware (<= 3.17.02) • supermicro b13det firmware (<= 3.17.02) • supermicro b13see-cpu-25g firmware (<= 3.17.02) • supermicro b13seg firmware (<= 3.17.02) • supermicro h13dsg-o-cpu firmware (<= 3.17.02) • supermicro h13dsg-o-cpu-d firmware (<= 3.17.02) • supermicro h13dsg-om firmware (<= 3.17.02) • supermicro h13dsh firmware (<= 3.17.02) • supermicro h13sae-mf firmware (<= 3.17.02) • supermicro h13sra-f firmware (<= 3.17.02) • supermicro h13sra-tf firmware (<= 3.17.02) • supermicro h13srd-f firmware (<= 3.17.02) • supermicro h13ssf firmware (<= 3.17.02) • supermicro h13ssh firmware (<= 3.17.02) • supermicro h13ssl-n firmware (<= 3.17.02) • supermicro h13ssl-nt firmware (<= 3.17.02) • supermicro h13sst-g firmware (<= 3.17.02) • supermicro h13sst-gc firmware (<= 3.17.02) • supermicro h13ssw firmware (<= 3.17.02) • supermicro h13svw-n firmware (<= 3.17.02) • supermicro h13svw-nt firmware (<= 3.17.02) • supermicro x13dai-t firmware (<= 3.17.02) • supermicro x13ddw-a firmware (<= 3.17.02) • supermicro x13deg-oa firmware (<= 3.17.02) • supermicro x13deg-oad firmware (<= 3.17.02) • supermicro x13deg-pvc firmware (<= 3.17.02) • supermicro x13deg-qt firmware (<= 3.17.02) • supermicro x13deh firmware (<= 3.17.02) • supermicro x13dei firmware (<= 3.17.02) • supermicro x13dei-t firmware (<= 3.17.02) • supermicro x13dem firmware (<= 3.17.02) • supermicro x13det-b firmware (<= 3.17.02) • supermicro x13dgu firmware (<= 3.17.02) • supermicro x13dsf-a firmware (<= 3.17.02) • supermicro x13qeh\+ firmware (<= 3.17.02) • supermicro x13sae firmware (<= 3.17.02) • supermicro x13sae-f firmware (<= 3.17.02) • supermicro x13san-c firmware (<= 3.17.02) • supermicro x13san-c-wohs firmware (<= 3.17.02) • supermicro x13san-e firmware (<= 3.17.02) • supermicro x13san-e-wohs firmware (<= 3.17.02) • supermicro x13san-h firmware (<= 3.17.02) • supermicro x13san-h-wohs firmware (<= 3.17.02) • supermicro x13san-l firmware (<= 3.17.02) • supermicro x13san-l-wohs firmware (<= 3.17.02) • supermicro x13saq firmware (<= 3.17.02) • supermicro x13sav-lvds firmware (<= 3.17.02) • supermicro x13sav-ps firmware (<= 3.17.02) … and 302 more