What’s Vulnerable › Vulnerabilities

CVE-2023-33412

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-07 · updated 2026-07-09

Description

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.

Affected products

• Supermicro B12Dpe-6 Firmware: through 3.17.02
• Supermicro B12Dpt-6 Firmware: through 3.17.02
• Supermicro B12Spe-Cpu-25G Firmware: through 3.17.02
• Supermicro B13Dee Firmware: through 3.17.02
• Supermicro B13Det Firmware: through 3.17.02
• Supermicro B13See-Cpu-25G Firmware: through 3.17.02
• Supermicro B13Seg Firmware: through 3.17.02
• Supermicro C9X299-Pg300 Firmware: through 3.17.02
• Supermicro C9X299-Pg300F Firmware: through 3.17.02
• Supermicro C9X299-Pg Firmware: through 3.17.02
• Supermicro C9X299-Pgf-L Firmware: through 3.17.02
• Supermicro C9X299-Pgf Firmware: through 3.17.02
• Supermicro C9X299-Rpgf-L Firmware: through 3.17.02
• Supermicro C9X299-Rpgf Firmware: through 3.17.02
• Supermicro H12Dgo-6 Firmware: through 3.17.02
• Supermicro H12Dgq-Nt6 Firmware: through 3.17.02
• Supermicro H12Dsg-O-Cpu Firmware: through 3.17.02
• Supermicro H12Dsg-Q-Cpu6 Firmware: through 3.17.02
• Supermicro H12Dsi-N6 Firmware: through 3.17.02
• Supermicro H12Dsi-Nt6 Firmware: through 3.17.02
• Supermicro H12Dst-B Firmware: through 3.17.02
• Supermicro H12Dsu-In Firmware: through 3.17.02
• Supermicro H12Dsu-Inr Firmware: through 3.17.02
• Supermicro H12Ssff-An6 Firmware: through 3.17.02
• Supermicro H12Ssfr-An6 Firmware: through 3.17.02
• Supermicro H12Ssg-An6 Firmware: through 3.17.02
• Supermicro H12Ssg-Anp6 Firmware: through 3.17.02
• Supermicro H12Ssl-C Firmware: through 3.17.02
• Supermicro H12Ssl-Ct Firmware: through 3.17.02
• Supermicro H12Ssl-I Firmware: through 3.17.02

References

• https://www.supermicro.com/en/support/security_BMC_Dec_2023
• https://www.supermicro.com/en/support/security_BMC_Dec_2023

Get alerted when CVE-2023-33412 or the next vulnerability affects your stack