CVE-2023-40289
high · 7.2A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
7.2
CVSS
17.8%
EPSS (exploit prob.)
97th
EPSS percentile
2024-03-27
Published
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| supermicro | x11ssm-f_firmware | 1.66 |
| supermicro | x11ssm-f | all versions |
| supermicro | x11sae-f_firmware | 1.66 |
| supermicro | x11sae-f | all versions |
| supermicro | x11sse-f_firmware | 1.66 |
| supermicro | x11sse-f | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-40289