PatchTheCVEsupermicro vulnerabilities
Recent CVEs affecting supermicro products. 10 tracked.
supermicro has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-03-27. Highest priority: CVE-2023-40289 (score 50/100).
- CVE-2023-33413 HIGH 8.8 UPGRADE UPGRADE The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management c
- CVE-2023-33412 HIGH 8.8 UPGRADE UPGRADE The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC
- CVE-2023-33411 HIGH 7.5 UPGRADE UPGRADE A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) imp
- CVE-2023-40290 HIGH 8.3 MITIGATE MITIGATE An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices
- CVE-2023-40289 HIGH 7.2 MITIGATE MITIGATE A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices
- CVE-2023-40288 HIGH 8.3 MITIGATE MITIGATE An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices
- CVE-2023-40287 HIGH 8.3 MITIGATE MITIGATE An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices
- CVE-2023-40286 HIGH 8.3 MITIGATE MITIGATE An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices
- CVE-2023-40285 MEDIUM 6.5 MITIGATE MITIGATE An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices
- CVE-2023-40284 HIGH 8.3 MITIGATE MITIGATE An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices
FAQ
How do I fix supermicro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is supermicro being exploited right now?
None of the tracked supermicro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which supermicro CVE should I patch first?
CVE-2023-40289 currently ranks highest (50/100): A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.