What’s Vulnerable › Vulnerabilities

CVE-2023-33411

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-07 · updated 2026-07-09
• Weakness: CWE-22

Description

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.

Affected products

• Supermicro B12Dpe-6 Firmware: through 3.17.02
• Supermicro B12Dpt-6 Firmware: through 3.17.02
• Supermicro B12Spe-Cpu-25G Firmware: through 3.17.02
• Supermicro B13Dee Firmware: through 3.17.02
• Supermicro B13Det Firmware: through 3.17.02
• Supermicro B13See-Cpu-25G Firmware: through 3.17.02
• Supermicro B13Seg Firmware: through 3.17.02
• Supermicro C9X299-Pg300 Firmware: through 3.17.02
• Supermicro C9X299-Pg300F Firmware: through 3.17.02
• Supermicro C9X299-Pg Firmware: through 3.17.02
• Supermicro C9X299-Pgf-L Firmware: through 3.17.02
• Supermicro C9X299-Pgf Firmware: through 3.17.02
• Supermicro C9X299-Rpgf-L Firmware: through 3.17.02
• Supermicro C9X299-Rpgf Firmware: through 3.17.02
• Supermicro H12Dgo-6 Firmware: through 3.17.02
• Supermicro H12Dgq-Nt6 Firmware: through 3.17.02
• Supermicro H12Dsg-O-Cpu Firmware: through 3.17.02
• Supermicro H12Dsg-Q-Cpu6 Firmware: through 3.17.02
• Supermicro H12Dsi-N6 Firmware: through 3.17.02
• Supermicro H12Dsi-Nt6 Firmware: through 3.17.02
• Supermicro H12Dst-B Firmware: through 3.17.02
• Supermicro H12Dsu-In Firmware: through 3.17.02
• Supermicro H12Dsu-Inr Firmware: through 3.17.02
• Supermicro H12Ssff-An6 Firmware: through 3.17.02
• Supermicro H12Ssfr-An6 Firmware: through 3.17.02
• Supermicro H12Ssg-An6 Firmware: through 3.17.02
• Supermicro H12Ssg-Anp6 Firmware: through 3.17.02
• Supermicro H12Ssl-C Firmware: through 3.17.02
• Supermicro H12Ssl-Ct Firmware: through 3.17.02
• Supermicro H12Ssl-I Firmware: through 3.17.02

References

• https://www.supermicro.com/en/support/security_BMC_Dec_2023
• https://www.supermicro.com/en/support/security_BMC_Dec_2023

Get alerted when CVE-2023-33411 or the next vulnerability affects your stack