X11sae F Firmware

x11sae-f_firmware

Vendor: Supermicro • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-40290 1Supermicro 3X11sae F Firmware X11sse F FirmwareX11ssm F Firmware Jun 18, 2025 Mar 27, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.
CVE-2023-40289 1Supermicro 3X11sae F Firmware X11sse F FirmwareX11ssm F Firmware Jun 18, 2025 Mar 27, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
CVE-2023-40288 1Supermicro 3X11sae F Firmware X11sse F FirmwareX11ssm F Firmware Jun 18, 2025 Mar 27, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-40287 1Supermicro 3X11sae F Firmware X11sse F FirmwareX11ssm F Firmware Jun 18, 2025 Mar 27, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-40286 1Supermicro 3X11sae F Firmware X11sse F FirmwareX11ssm F Firmware Jun 18, 2025 Mar 27, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-40285 1Supermicro 3X11sae F Firmware X11sse F FirmwareX11ssm F Firmware Jun 17, 2025 Mar 27, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-40284 1Supermicro 3X11sae F Firmware X11sse F FirmwareX11ssm F Firmware Jun 17, 2025 Mar 27, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-33413 1Supermicro 356B12dpe 6 Firmware B12dpt 6 FirmwareB12spe Cpu 25g Firmware+353 more Nov 21, 2024 Dec 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02...Show more The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands.Show less
CVE-2023-33412 1Supermicro 356B12dpe 6 Firmware B12dpt 6 FirmwareB12spe Cpu 25g Firmware+353 more Nov 21, 2024 Dec 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote...Show more The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.Show less
CVE-2023-33411 1Supermicro 356B12dpe 6 Firmware B12dpt 6 FirmwareB12spe Cpu 25g Firmware+353 more Nov 21, 2024 Dec 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unaut...Show more A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.Show less