Записи Supermicro
33 опубликованных записей вендора supermicro.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 4 · 12,1 %
- Pre-auth RCE
- 7
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer5
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-798 Use of Hard-coded Credentials2
- CWE-20 Improper Input Validation2
- CWE-287 Improper Authentication2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
33 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
62На этой неделе | CVE-2013-3623Готовый эксплойт | Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) wsupermicro · intelligent platform management firmware · CWE-119 | Критическая10,0 | — | 72,3 % | 10 дек. 2013 г. |
60На этой неделе | CVE-2013-3619Готовый эксплойт | Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for supermicro · smt x9 firmware · CWE-798 | Высокая8,1 | — | 9,6 % | 2 янв. 2020 г. |
48В плане | CVE-2013-4782Готовый эксплойт | The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suitesupermicro · bmc · CWE-287 | Критическая10,0 | — | 26,2 % | 8 июл. 2013 г. |
43В плане | CVE-2013-3607Эксплойта нет | Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermisupermicro · h8dcl-6f · CWE-119 | Критическая10,0 | — | 9,7 % | 7 сент. 2013 г. |
42В плане | CVE-2013-3608Эксплойта нет | The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*supermicro · h8dcl-6f · CWE-20 | Критическая10,0 | — | 6,4 % | 7 сент. 2013 г. |
42В плане | CVE-2013-3609Эксплойта нет | The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*supermicro · h8dcl-6f · CWE-20 | Критическая10,0 | — | 5,3 % | 7 сент. 2013 г. |
41В плане | CVE-2019-19642Эксплойта нет | On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authentisupermicro · x8sti-f bios · CWE-78 | Высокая8,8 | — | 19,0 % | 8 дек. 2019 г. |
41В плане | CVE-2019-16650Эксплойта нет | On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket filsupermicro · x11dai-n firmware | Критическая10,0 | — | 2,1 % | 20 сент. 2019 г. |
40В плане | CVE-2013-6785Готовый эксплойт | Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary supermicro · intelligent platform management interface · CWE-22 | Средняя4,3 | — | 4,3 % | 23 янв. 2020 г. |
40В плане | CVE-2019-13131Эксплойта нет | Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPsupermicro · superdoctor 5 · CWE-306 | Критическая9,8 | — | 3,5 % | 1 июл. 2019 г. |
40В плане | CVE-2023-35861Эксплойта нет | A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackerssupermicro · h12dst-b firmware · CWE-78 | Критическая9,8 | — | 2,1 % | 31 июл. 2023 г. |
40В плане | CVE-2019-16649Эксплойта нет | On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media servicesupermicro · x11dai-n firmware · CWE-287 | Критическая10,0 | — | 0,9 % | 20 сент. 2019 г. |
39Наблюдать | CVE-2024-36435Эксплойта нет | An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules).CWE-121 | Критическая9,8 | — | 1,2 % | 11 июл. 2024 г. |
38Наблюдать | CVE-2013-3622Эксплойта нет | Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro Xsupermicro · intelligent platform management firmware · CWE-119 | Критическая9,0 | — | 5,4 % | 10 дек. 2013 г. |
36Наблюдать | CVE-2020-15046Proof of concept | The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/confisupermicro · x10drh-it bios · CWE-352 | Высокая8,8 | — | 2,2 % | 24 июн. 2020 г. |
35Наблюдать | CVE-2023-33412Эксплойта нет | The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicrosupermicro · m11sdv-4c-ln4f firmware | Высокая8,8 | — | 1,1 % | 7 дек. 2023 г. |
35Наблюдать | CVE-2023-33413Эксплойта нет | The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementationsupermicro · m11sdv-4c-ln4f firmware · CWE-798 | Высокая8,8 | — | 0,9 % | 7 дек. 2023 г. |
34Наблюдать | CVE-2023-40289Proof of concept | A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-269 | Высокая7,2 | — | 18,4 % | 27 мар. 2024 г. |
33Наблюдать | CVE-2023-40284Эксплойта нет | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Высокая8,3 | — | 0,7 % | 27 мар. 2024 г. |
33Наблюдать | CVE-2023-40290Эксплойта нет | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Высокая8,3 | — | 0,6 % | 27 мар. 2024 г. |
33Наблюдать | CVE-2023-40286Эксплойта нет | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Высокая8,3 | — | 0,6 % | 27 мар. 2024 г. |
33Наблюдать | CVE-2023-40288Эксплойта нет | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Высокая8,3 | — | 0,5 % | 27 мар. 2024 г. |
33Наблюдать | CVE-2023-40287Эксплойта нет | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Высокая8,3 | — | 0,5 % | 27 мар. 2024 г. |
31Наблюдать | CVE-2013-3620Эксплойта нет | Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards befosupermicro · smt x9 firmware · CWE-522 | Высокая7,5 | — | 3,6 % | 2 янв. 2020 г. |
31Наблюдать | CVE-2023-34853Proof of concept | Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of Smcsupermicro · x12dai-n6 firmware · CWE-787 | Высокая7,8 | — | 0,3 % | 22 авг. 2023 г. |
- CVE-2013-362362На этой неделе
Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) w
КритическаяCVSS 10,0Готовый эксплойтEPSS 72 %supermicro · intelligent platform management firmware10 дек. 2013 г.
- CVE-2013-361960На этой неделе
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for
ВысокаяCVSS 8,1Готовый эксплойтEPSS 9 %supermicro · smt x9 firmware2 янв. 2020 г.
- CVE-2013-478248В плане
The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite
КритическаяCVSS 10,0Готовый эксплойтEPSS 26 %supermicro · bmc8 июл. 2013 г.
- CVE-2013-360743В плане
Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermi
КритическаяCVSS 10,0Эксплойта нетEPSS 9 %supermicro · h8dcl-6f7 сент. 2013 г.
- CVE-2013-360842В плане
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*
КритическаяCVSS 10,0Эксплойта нетEPSS 6 %supermicro · h8dcl-6f7 сент. 2013 г.
- CVE-2013-360942В плане
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*
КритическаяCVSS 10,0Эксплойта нетEPSS 5 %supermicro · h8dcl-6f7 сент. 2013 г.
- CVE-2019-1964241В плане
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenti
ВысокаяCVSS 8,8Эксплойта нетEPSS 19 %supermicro · x8sti-f bios8 дек. 2019 г.
- CVE-2019-1665041В плане
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket fil
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %supermicro · x11dai-n firmware20 сент. 2019 г.
- CVE-2013-678540В плане
Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary
СредняяCVSS 4,3Готовый эксплойтEPSS 4 %supermicro · intelligent platform management interface23 янв. 2020 г.
- CVE-2019-1313140В плане
Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRP
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %supermicro · superdoctor 51 июл. 2019 г.
- CVE-2023-3586140В плане
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %supermicro · h12dst-b firmware31 июл. 2023 г.
- CVE-2019-1664940В плане
On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service
КритическаяCVSS 10,0Эксплойта нетEPSS 0 %supermicro · x11dai-n firmware20 сент. 2019 г.
- CVE-2024-3643539Наблюдать
An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules).
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %11 июл. 2024 г.
- CVE-2013-362238Наблюдать
Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X
КритическаяCVSS 9,0Эксплойта нетEPSS 5 %supermicro · intelligent platform management firmware10 дек. 2013 г.
- CVE-2020-1504636Наблюдать
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/confi
ВысокаяCVSS 8,8Proof of conceptEPSS 2 %supermicro · x10drh-it bios24 июн. 2020 г.
- CVE-2023-3341235Наблюдать
The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %supermicro · m11sdv-4c-ln4f firmware7 дек. 2023 г.
- CVE-2023-3341335Наблюдать
The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %supermicro · m11sdv-4c-ln4f firmware7 дек. 2023 г.
- CVE-2023-4028934Наблюдать
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
ВысокаяCVSS 7,2Proof of conceptEPSS 18 %supermicro · x11ssm-f firmware27 мар. 2024 г.
- CVE-2023-4028433Наблюдать
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %supermicro · x11ssm-f firmware27 мар. 2024 г.
- CVE-2023-4029033Наблюдать
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %supermicro · x11ssm-f firmware27 мар. 2024 г.
- CVE-2023-4028633Наблюдать
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %supermicro · x11ssm-f firmware27 мар. 2024 г.
- CVE-2023-4028833Наблюдать
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %supermicro · x11ssm-f firmware27 мар. 2024 г.
- CVE-2023-4028733Наблюдать
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %supermicro · x11ssm-f firmware27 мар. 2024 г.
- CVE-2013-362031Наблюдать
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards befo
ВысокаяCVSS 7,5Эксплойта нетEPSS 3 %supermicro · smt x9 firmware2 янв. 2020 г.
- CVE-2023-3485331Наблюдать
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of Smc
ВысокаяCVSS 7,8Proof of conceptEPSS 0 %supermicro · x12dai-n6 firmware22 авг. 2023 г.