What is CVE-2023-33412?

CVE-2023-33412 is a high-severity vulnerability in Supermicro B12dpe-6. CVSS score: 8.8/10. Published 2023-12-07.

How severe is CVE-2023-33412?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Supermicro B12dpe-6

CVE-2023-33412

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.

EPSS: 0.012 (63.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Supermicro B12dpe-6
Supermicro B12dpe-6_firmware
Supermicro B12dpt-6
Supermicro B12dpt-6_firmware
Supermicro B12spe-cpu-25g
Supermicro B12spe-cpu-25g_firmware
Supermicro B13dee
Supermicro B13dee_firmware
Supermicro B13det
Supermicro B13det_firmware

References

af854a3a-2127-422b-91ae-364da2661108 (Product)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2023-33412?: CVE-2023-33412 is a high-severity vulnerability in Supermicro B12dpe-6. CVSS score: 8.8/10. Published 2023-12-07.
How severe is CVE-2023-33412?: High severity. CVSS v3 base score is 8.8 out of 10.