What’s Vulnerable › Vulnerabilities

CVE-2022-43309

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-04-07 · updated 2026-07-09
• Weakness: CWE-732

Description

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

Affected products

• Supermicro H11Dsi-Nt Firmware: all versions
• Supermicro H11Dsi Firmware: all versions
• Supermicro H11Dst-B Firmware: all versions
• Supermicro H11Dsu-In Firmware: all versions
• Supermicro H12Dgo-6 Firmware: all versions
• Supermicro H12Dsg-O-Cpu Firmware: all versions
• Supermicro H12Dsi-N6 Firmware: all versions
• Supermicro H12Dsi-Nt6 Firmware: all versions
• Supermicro H12Dst-B Firmware: all versions
• Supermicro H12Dsu-In Firmware: all versions
• Supermicro H12Dsu-Inr Firmware: all versions
• Supermicro H12Ssff-An6 Firmware: all versions
• Supermicro H12Ssg-Anp6 Firmware: all versions
• Supermicro H12Ssl-C Firmware: all versions
• Supermicro H12Ssl-Ct Firmware: all versions
• Supermicro H12Ssl-I Firmware: all versions
• Supermicro H12Ssl-Nt Firmware: all versions
• Supermicro H12Sst-Ps Firmware: all versions
• Supermicro H12Ssw-In Firmware: all versions
• Supermicro H12Ssw-Inl Firmware: all versions
• Supermicro H12Ssw-Inr Firmware: all versions
• Supermicro H12Ssw-Nt Firmware: all versions
• Supermicro H12Ssw-Ntl Firmware: all versions
• Supermicro H12Ssw-Ntr Firmware: all versions
• Supermicro X11Dac Firmware: all versions
• Supermicro X11Dai-N Firmware: all versions
• Supermicro X11Ddw-L Firmware: all versions
• Supermicro X11Ddw-Nt Firmware: all versions
• Supermicro X11Dgo-T Firmware: all versions
• Supermicro X11Dgq Firmware: all versions

References

• https://www.supermicro.com/en/support/security_VRM_Jan_2023
• https://www.supermicro.com/en/support/security_VRM_Jan_2023

Get alerted when CVE-2022-43309 or the next vulnerability affects your stack