CVE-2023-33412
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-33412 is a vulnerability affecting the web interface in Supermicro's Intelligent Platform Management Interface (IPMI) baseboard management controllers (BMCs) on X11 and M11 devices, with firmware versions prior to 3.17.02. This issue enables remote, authenticated users to execute arbitrary commands by sending crafted requests to vulnerable cgi endpoints. The implications of this vulnerability are significant, as it may allow attackers to perform unauthorized system modifications or gain unauthorized access to sensitive data. Supermicro strongly advises users to update their firmware to the latest version to mitigate this risk. This vulnerability can be exploited through the IPMI interface, making it crucial for organizations to secure their management interfaces and implement strong access controls to limit the potential impact.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Super Micro Computer, Inc.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions