CVE-2023-33412

Summary

CVE-2023-33412 is a vulnerability affecting the web interface in Supermicro's Intelligent Platform Management Interface (IPMI) baseboard management controllers (BMCs) on X11 and M11 devices, with firmware versions prior to 3.17.02. This issue enables remote, authenticated users to execute arbitrary commands by sending crafted requests to vulnerable cgi endpoints. The implications of this vulnerability are significant, as it may allow attackers to perform unauthorized system modifications or gain unauthorized access to sensitive data. Supermicro strongly advises users to update their firmware to the latest version to mitigate this risk. This vulnerability can be exploited through the IPMI interface, making it crucial for organizations to secure their management interfaces and implement strong access controls to limit the potential impact.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.