CVEvulnerability
CVE-2023-34853
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.
Affected configurations
• supermicro x12dai-n6 firmware
• supermicro x12ddw-a6 firmware
• supermicro x12dgo-6 firmware
• supermicro x12dgq-r firmware
• supermicro x12dgu firmware
• supermicro x12dhm-6 firmware
• supermicro x12dpd-a6m25 firmware
• supermicro x12dpfr-an6 firmware
• supermicro x12dpg-ar firmware
• supermicro x12dpg-oa6 firmware
• supermicro x12dpg-oa6-gd2 firmware
• supermicro x12dpg-qbt6 firmware
• supermicro x12dpg-qr firmware
• supermicro x12dpg-qt6 firmware
• supermicro x12dpg-u6 firmware
• supermicro x12dpi-n6 firmware
• supermicro x12dpi-nt6 firmware
• supermicro x12dpl-i6 firmware
• supermicro x12dpl-nt6 firmware
• supermicro x12dpt-b6 firmware
• supermicro x12dpt-pt46 firmware
• supermicro x12dpt-pt6 firmware
• supermicro x12dpu-6 firmware
• supermicro x12dsc-6 firmware
• supermicro x12qch\+ firmware
• supermicro x12sae firmware
• supermicro x12sae-5 firmware
• supermicro x12sca-5f firmware
• supermicro x12sca-f firmware
• supermicro x12scq firmware
• supermicro x12scv-lvds firmware
• supermicro x12scv-w firmware
• supermicro x12scz-f firmware
• supermicro x12scz-qf firmware
• supermicro x12scz-tln4f firmware
• supermicro x12sdv-10c-sp6f firmware
• supermicro x12sdv-10c-spt4f firmware
• supermicro x12sdv-14c-spt8f firmware
• supermicro x12sdv-16c-spt8f firmware
• supermicro x12sdv-20c-spt8f firmware
• supermicro x12sdv-4c-sp6f firmware
• supermicro x12sdv-4c-spt4f firmware
• supermicro x12sdv-4c-spt8f firmware
• supermicro x12sdv-8c-sp6f firmware
• supermicro x12sdv-8c-spt4f firmware
• supermicro x12sdv-8c-spt8f firmware
• supermicro x12sdv-8ce-sp4f firmware
• supermicro x12spa-tf firmware
• supermicro x12sped-f firmware
• supermicro x12spg-nf firmware
• supermicro x12spi-tf firmware
• supermicro x12spl-f firmware
• supermicro x12spl-ln4f firmware
• supermicro x12spm-ln4f firmware
• supermicro x12spm-ln6tf firmware
• supermicro x12spm-tf firmware
• supermicro x12spo-f firmware
• supermicro x12spo-ntf firmware
• supermicro x12spt-g firmware
• supermicro x12spt-gc firmware
… and 211 more
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.supermicro.com/Bios/softfiles/17136/X12DPG-QR_1.4b_X1.02.61_SUM2.10.0.zip. Product
- https://www.supermicro.com/en/support/security_BIOS_Aug_2023 Vendor Advisory
- https://www.supermicro.com/Bios/softfiles/17136/X12DPG-QR_1.4b_X1.02.61_SUM2.10.0.zip. Product
- https://www.supermicro.com/en/support/security_BIOS_Aug_2023 Vendor Advisory