What’s Vulnerable › Vulnerabilities

CVE-2023-34853

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-22 · updated 2026-06-17
• Weakness: CWE-787

Description

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

Affected products

• Supermicro H11Dsi-Nt Firmware: all versions
• Supermicro H11Dsi Firmware: all versions
• Supermicro H11Dst-B Firmware: all versions
• Supermicro H11Dsu-In Firmware: all versions
• Supermicro H12Dgo-6 Firmware: all versions
• Supermicro H12Dgq-Nt6 Firmware: all versions
• Supermicro H12Dsg-O-Cpu Firmware: all versions
• Supermicro H12Dsg-Q-Cpu6 Firmware: all versions
• Supermicro H12Dsi-N6 Firmware: all versions
• Supermicro H12Dsi-Nt6 Firmware: all versions
• Supermicro H12Dst-B Firmware: all versions
• Supermicro H12Dsu-In Firmware: all versions
• Supermicro H12Dsu-Inr Firmware: all versions
• Supermicro H12Ssff-An6 Firmware: all versions
• Supermicro H12Ssfr-An6 Firmware: all versions
• Supermicro H12Ssg-An6 Firmware: all versions
• Supermicro H12Ssg-Anp6 Firmware: all versions
• Supermicro H12Ssl-C Firmware: all versions
• Supermicro H12Ssl-Ct Firmware: all versions
• Supermicro H12Ssl-I Firmware: all versions
• Supermicro H12Ssl-Nt Firmware: all versions
• Supermicro H12Sst-Ps Firmware: all versions
• Supermicro H12Ssw-An6 Firmware: all versions
• Supermicro H12Ssw-In Firmware: all versions
• Supermicro H12Ssw-Inl Firmware: all versions
• Supermicro H12Ssw-Inr Firmware: all versions
• Supermicro H12Ssw-Nt Firmware: all versions
• Supermicro H12Ssw-Ntl Firmware: all versions
• Supermicro H12Ssw-Ntr Firmware: all versions
• Supermicro H13Dsg-O-Cpu-D Firmware: all versions

References

• https://www.supermicro.com/Bios/softfiles/17136/X12DPG-QR_1.4b_X1.02.61_SUM2.10.0.zip.
• https://www.supermicro.com/en/support/security_BIOS_Aug_2023
• https://www.supermicro.com/Bios/softfiles/17136/X12DPG-QR_1.4b_X1.02.61_SUM2.10.0.zip.
• https://www.supermicro.com/en/support/security_BIOS_Aug_2023

Get alerted when CVE-2023-34853 or the next vulnerability affects your stack