CVE-2023-33412
HIGHCVSS 8.8/10EPSS 1.22%
Last modified
CVE-2023-33412 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.. EPSS estimates a 1.22% chance of exploitation in the next 30 days.
Description
The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Supermicro | M11sdv-4c-Ln4f Firmware | <= 3.17.02 |
| Supermicro | M11sdv-4ct-Ln4f Firmware | <= 3.17.02 |
| Supermicro | M11sdv-8c-Ln4f Firmware | <= 3.17.02 |
| Supermicro | M11sdv-8ct-Ln4f Firmware | <= 3.17.02 |
| Supermicro | M11sdv-8c\+-Ln4f Firmware | <= 3.17.02 |
| Supermicro | C9x299-Pg Firmware | <= 3.17.02 |
| Supermicro | C9x299-Pg300 Firmware | <= 3.17.02 |
| Supermicro | C9x299-Pg300f Firmware | <= 3.17.02 |
| Supermicro | C9x299-Pgf Firmware | <= 3.17.02 |
| Supermicro | C9x299-Pgf-L Firmware | <= 3.17.02 |
| Supermicro | C9x299-Rpgf Firmware | <= 3.17.02 |
| Supermicro | C9x299-Rpgf-L Firmware | <= 3.17.02 |
| Supermicro | B13dee Firmware | <= 3.17.02 |
| Supermicro | B13det Firmware | <= 3.17.02 |
| Supermicro | B13see-Cpu-25g Firmware | <= 3.17.02 |
| Supermicro | B13seg Firmware | <= 3.17.02 |
| Supermicro | H13dsg-O-Cpu Firmware | <= 3.17.02 |
| Supermicro | H13dsg-O-Cpu-D Firmware | <= 3.17.02 |
| Supermicro | H13dsg-Om Firmware | <= 3.17.02 |
| Supermicro | H13dsh Firmware | <= 3.17.02 |
| Supermicro | H13sae-Mf Firmware | <= 3.17.02 |
| Supermicro | H13sra-F Firmware | <= 3.17.02 |
| Supermicro | H13sra-Tf Firmware | <= 3.17.02 |
| Supermicro | H13srd-F Firmware | <= 3.17.02 |
| Supermicro | H13ssf Firmware | <= 3.17.02 |
| Supermicro | H13ssh Firmware | <= 3.17.02 |
| Supermicro | H13ssl-N Firmware | <= 3.17.02 |
| Supermicro | H13ssl-Nt Firmware | <= 3.17.02 |
| Supermicro | H13sst-G Firmware | <= 3.17.02 |
| Supermicro | H13sst-Gc Firmware | <= 3.17.02 |
| Supermicro | H13ssw Firmware | <= 3.17.02 |
| Supermicro | H13svw-N Firmware | <= 3.17.02 |
| Supermicro | H13svw-Nt Firmware | <= 3.17.02 |
| Supermicro | X13dai-T Firmware | <= 3.17.02 |
| Supermicro | X13ddw-A Firmware | <= 3.17.02 |
| Supermicro | X13deg-Oa Firmware | <= 3.17.02 |
| Supermicro | X13deg-Oad Firmware | <= 3.17.02 |
| Supermicro | X13deg-Pvc Firmware | <= 3.17.02 |
| Supermicro | X13deg-Qt Firmware | <= 3.17.02 |
| Supermicro | X13deh Firmware | <= 3.17.02 |
| Supermicro | X13dei Firmware | <= 3.17.02 |
| Supermicro | X13dei-T Firmware | <= 3.17.02 |
| Supermicro | X13dem Firmware | <= 3.17.02 |
| Supermicro | X13det-B Firmware | <= 3.17.02 |
| Supermicro | X13dgu Firmware | <= 3.17.02 |
| Supermicro | X13dsf-A Firmware | <= 3.17.02 |
| Supermicro | X13qeh\+ Firmware | <= 3.17.02 |
| Supermicro | X13sae Firmware | <= 3.17.02 |
| Supermicro | X13sae-F Firmware | <= 3.17.02 |
| Supermicro | X13san-C Firmware | <= 3.17.02 |
Showing 50 of 362 affected configurations. See NVD for the full list.
References
- https://www.supermicro.com/en/support/security_BMC_Dec_2023Vendor Advisory
- https://www.supermicro.com/en/support/security_BMC_Dec_2023Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-33412?
The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.
How severe is CVE-2023-33412?
CVE-2023-33412 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 1.22% probability of exploitation in the next 30 days.
How do I fix CVE-2023-33412?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-33405Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Red…6.1
- CVE-2023-33408Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). T…5.4
- CVE-2023-33409Minical 1.0.0 is vulnerable to Cross Site Request Forgery (C…6.5
- CVE-2023-3341The code that processes control channel messages sent to `na…7.5
- CVE-2023-33410Minical 1.0.0 and earlier contains a CSV injection vulnerabi…8.8
- CVE-2023-33411A web server in the Intelligent Platform Management Interfac…7.5
- CVE-2023-33413The configuration functionality in the Intelligent Platform …8.8
- CVE-2023-3342The User Registration plugin for WordPress is vulnerable to …9.9
- CVE-2023-3343The User Registration plugin for WordPress is vulnerable to …8.8
- CVE-2023-33438A stored Cross-site scripting (XSS) vulnerability in Wolters…5.4
- CVE-2023-33439Sourcecodester Faculty Evaluation System v1.0 is vulnerable …7.2
- CVE-2023-3344The Auto Location for WP Job Manager via Google WordPress pl…4.8
Are you affected by CVE-2023-33412?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST