Supermicro kayıtları
supermicro üreticisine ait 33 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 4 · %12,1
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer5
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-798 Use of Hard-coded Credentials2
- CWE-20 Improper Input Validation2
- CWE-287 Improper Authentication2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
33 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2013-3623Silahlaştırılmış | Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) wsupermicro · intelligent platform management firmware · CWE-119 | Kritik10,0 | — | %72,3 | 10 Ara 2013 |
48Planlayın | CVE-2013-4782Silahlaştırılmış | The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suitesupermicro · bmc · CWE-287 | Kritik10,0 | — | %26,2 | 8 Tem 2013 |
43Planlayın | CVE-2013-3607İstismar yok | Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermisupermicro · h8dcl-6f · CWE-119 | Kritik10,0 | — | %9,7 | 7 Eyl 2013 |
42Planlayın | CVE-2013-3608İstismar yok | The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*supermicro · h8dcl-6f · CWE-20 | Kritik10,0 | — | %6,4 | 7 Eyl 2013 |
42Planlayın | CVE-2013-3609İstismar yok | The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*supermicro · h8dcl-6f · CWE-20 | Kritik10,0 | — | %5,3 | 7 Eyl 2013 |
41Planlayın | CVE-2019-19642İstismar yok | On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authentisupermicro · x8sti-f bios · CWE-78 | Yüksek8,8 | — | %19,0 | 8 Ara 2019 |
41Planlayın | CVE-2019-16650İstismar yok | On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket filsupermicro · x11dai-n firmware | Kritik10,0 | — | %2,1 | 20 Eyl 2019 |
40Planlayın | CVE-2019-13131İstismar yok | Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPsupermicro · superdoctor 5 · CWE-306 | Kritik9,8 | — | %3,5 | 1 Tem 2019 |
40Planlayın | CVE-2023-35861İstismar yok | A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackerssupermicro · h12dst-b firmware · CWE-78 | Kritik9,8 | — | %2,1 | 31 Tem 2023 |
40Planlayın | CVE-2019-16649İstismar yok | On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media servicesupermicro · x11dai-n firmware · CWE-287 | Kritik10,0 | — | %0,9 | 20 Eyl 2019 |
39İzleyin | CVE-2024-36435İstismar yok | An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules).CWE-121 | Kritik9,8 | — | %1,2 | 11 Tem 2024 |
38İzleyin | CVE-2013-3622İstismar yok | Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro Xsupermicro · intelligent platform management firmware · CWE-119 | Kritik9,0 | — | %5,4 | 10 Ara 2013 |
36İzleyin | CVE-2020-15046Kavram kanıtı | The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/confisupermicro · x10drh-it bios · CWE-352 | Yüksek8,8 | — | %2,2 | 24 Haz 2020 |
35İzleyin | CVE-2013-3619Silahlaştırılmış | Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for supermicro · smt x9 firmware · CWE-798 | Yüksek8,1 | — | %9,6 | 2 Oca 2020 |
35İzleyin | CVE-2023-33412İstismar yok | The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicrosupermicro · m11sdv-4c-ln4f firmware | Yüksek8,8 | — | %1,1 | 7 Ara 2023 |
35İzleyin | CVE-2023-33413İstismar yok | The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementationsupermicro · m11sdv-4c-ln4f firmware · CWE-798 | Yüksek8,8 | — | %0,9 | 7 Ara 2023 |
33İzleyin | CVE-2023-40289Kavram kanıtı | A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-269 | Yüksek7,2 | — | %18,2 | 27 Mar 2024 |
33İzleyin | CVE-2023-40284İstismar yok | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Yüksek8,3 | — | %0,7 | 27 Mar 2024 |
33İzleyin | CVE-2023-40290İstismar yok | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Yüksek8,3 | — | %0,6 | 27 Mar 2024 |
33İzleyin | CVE-2023-40286İstismar yok | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Yüksek8,3 | — | %0,6 | 27 Mar 2024 |
33İzleyin | CVE-2023-40288İstismar yok | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Yüksek8,3 | — | %0,5 | 27 Mar 2024 |
33İzleyin | CVE-2023-40287İstismar yok | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.supermicro · x11ssm-f firmware · CWE-79 | Yüksek8,3 | — | %0,5 | 27 Mar 2024 |
31İzleyin | CVE-2013-3620İstismar yok | Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards befosupermicro · smt x9 firmware · CWE-522 | Yüksek7,5 | — | %3,6 | 2 Oca 2020 |
31İzleyin | CVE-2023-34853Kavram kanıtı | Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of Smcsupermicro · x12dai-n6 firmware · CWE-787 | Yüksek7,8 | — | %0,3 | 22 Ağu 2023 |
30İzleyin | CVE-2023-33411İstismar yok | A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 supermicro · m11sdv-4c-ln4f firmware · CWE-22 | Yüksek7,5 | — | %1,2 | 7 Ara 2023 |
- CVE-2013-362362Bu hafta
Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) w
KritikCVSS 10,0SilahlaştırılmışEPSS %72supermicro · intelligent platform management firmware10 Ara 2013
- CVE-2013-478248Planlayın
The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite
KritikCVSS 10,0SilahlaştırılmışEPSS %26supermicro · bmc8 Tem 2013
- CVE-2013-360743Planlayın
Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermi
KritikCVSS 10,0İstismar yokEPSS %9supermicro · h8dcl-6f7 Eyl 2013
- CVE-2013-360842Planlayın
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*
KritikCVSS 10,0İstismar yokEPSS %6supermicro · h8dcl-6f7 Eyl 2013
- CVE-2013-360942Planlayın
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*
KritikCVSS 10,0İstismar yokEPSS %5supermicro · h8dcl-6f7 Eyl 2013
- CVE-2019-1964241Planlayın
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenti
YüksekCVSS 8,8İstismar yokEPSS %19supermicro · x8sti-f bios8 Ara 2019
- CVE-2019-1665041Planlayın
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket fil
KritikCVSS 10,0İstismar yokEPSS %2supermicro · x11dai-n firmware20 Eyl 2019
- CVE-2019-1313140Planlayın
Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRP
KritikCVSS 9,8İstismar yokEPSS %3supermicro · superdoctor 51 Tem 2019
- CVE-2023-3586140Planlayın
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers
KritikCVSS 9,8İstismar yokEPSS %2supermicro · h12dst-b firmware31 Tem 2023
- CVE-2019-1664940Planlayın
On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service
KritikCVSS 10,0İstismar yokEPSS %0supermicro · x11dai-n firmware20 Eyl 2019
- CVE-2024-3643539İzleyin
An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules).
KritikCVSS 9,8İstismar yokEPSS %111 Tem 2024
- CVE-2013-362238İzleyin
Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X
KritikCVSS 9,0İstismar yokEPSS %5supermicro · intelligent platform management firmware10 Ara 2013
- CVE-2020-1504636İzleyin
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/confi
YüksekCVSS 8,8Kavram kanıtıEPSS %2supermicro · x10drh-it bios24 Haz 2020
- CVE-2013-361935İzleyin
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for
YüksekCVSS 8,1SilahlaştırılmışEPSS %9supermicro · smt x9 firmware2 Oca 2020
- CVE-2023-3341235İzleyin
The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro
YüksekCVSS 8,8İstismar yokEPSS %1supermicro · m11sdv-4c-ln4f firmware7 Ara 2023
- CVE-2023-3341335İzleyin
The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation
YüksekCVSS 8,8İstismar yokEPSS %0supermicro · m11sdv-4c-ln4f firmware7 Ara 2023
- CVE-2023-4028933İzleyin
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
YüksekCVSS 7,2Kavram kanıtıEPSS %18supermicro · x11ssm-f firmware27 Mar 2024
- CVE-2023-4028433İzleyin
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
YüksekCVSS 8,3İstismar yokEPSS %0supermicro · x11ssm-f firmware27 Mar 2024
- CVE-2023-4029033İzleyin
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
YüksekCVSS 8,3İstismar yokEPSS %0supermicro · x11ssm-f firmware27 Mar 2024
- CVE-2023-4028633İzleyin
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
YüksekCVSS 8,3İstismar yokEPSS %0supermicro · x11ssm-f firmware27 Mar 2024
- CVE-2023-4028833İzleyin
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
YüksekCVSS 8,3İstismar yokEPSS %0supermicro · x11ssm-f firmware27 Mar 2024
- CVE-2023-4028733İzleyin
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
YüksekCVSS 8,3İstismar yokEPSS %0supermicro · x11ssm-f firmware27 Mar 2024
- CVE-2013-362031İzleyin
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards befo
YüksekCVSS 7,5İstismar yokEPSS %3supermicro · smt x9 firmware2 Oca 2020
- CVE-2023-3485331İzleyin
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of Smc
YüksekCVSS 7,8Kavram kanıtıEPSS %0supermicro · x12dai-n6 firmware22 Ağu 2023
- CVE-2023-3341130İzleyin
A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11
YüksekCVSS 7,5İstismar yokEPSS %1supermicro · m11sdv-4c-ln4f firmware7 Ara 2023