CVEvulnerability

CVE-2023-35861

9.8 CRITICAL Published 2023-07-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.

Affected configurations

• supermicro h12dst-b firmware (< 03.10.35) • supermicro x13dai-t firmware • supermicro x13ddw-a firmware • supermicro x13deg-oa firmware • supermicro x13deg-oad firmware • supermicro x13deg-pvc firmware • supermicro x13deg-qt firmware • supermicro x13dei firmware • supermicro x13dei-t firmware • supermicro x13dem firmware • supermicro x13det-b firmware • supermicro x13dgu firmware • supermicro x13dsf-a firmware • supermicro x13qeh\+ firmware • supermicro x13sae firmware • supermicro x13sae-f firmware • supermicro x13san-c firmware • supermicro x13san-c-wohs firmware • supermicro x13san-e firmware • supermicro x13san-e-wohs firmware • supermicro x13san-h firmware • supermicro x13san-h-wohs firmware • supermicro x13san-l firmware • supermicro x13san-l-wohs firmware • supermicro x13saq firmware • supermicro x13sav-lvds firmware • supermicro x13sav-ps firmware • supermicro x13saz-f firmware • supermicro x13saz-q firmware • supermicro x13sedw-f firmware • supermicro x13seed-f firmware • supermicro x13seed-sf firmware • supermicro x13sefr-a firmware • supermicro x13sei-f firmware • supermicro x13sei-tf firmware • supermicro x13sem-f firmware • supermicro x13sem-tf firmware • supermicro x13set-g firmware • supermicro x13set-gc firmware • supermicro x13sew-f firmware • supermicro x13sew-tf firmware • supermicro x13sra-tf firmware • supermicro x13srn-e firmware • supermicro x13srn-e-wohs firmware • supermicro x13srn-h firmware • supermicro x13srn-h-wohs firmware • supermicro x13swa-tf firmware • supermicro h13dsg-o-cpu firmware • supermicro h13dsg-o-cpu-d firmware • supermicro h13dsh firmware • supermicro h13sae-mf firmware • supermicro h13srd-f firmware • supermicro h13ssf firmware • supermicro h13ssh firmware • supermicro h13ssl-n firmware • supermicro h13ssl-nt firmware • supermicro h13sst-g firmware • supermicro h13sst-gc firmware • supermicro h13ssw firmware • supermicro x12dai-n6 firmware … and 106 more

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References