What is CVE-2023-33413?

CVE-2023-33413 is a high-severity vulnerability in Supermicro B12dpe-6, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2023-12-07.

How severe is CVE-2023-33413?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Supermicro B12dpe-6

CVE-2023-33413

The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands.

EPSS: 0.010 (57.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Supermicro B12dpe-6
Supermicro B12dpe-6_firmware
Supermicro B12dpt-6
Supermicro B12dpt-6_firmware
Supermicro B12spe-cpu-25g
Supermicro B12spe-cpu-25g_firmware
Supermicro B13dee
Supermicro B13dee_firmware
Supermicro B13det
Supermicro B13det_firmware

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

af854a3a-2127-422b-91ae-364da2661108 (Product)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2023-33413?: CVE-2023-33413 is a high-severity vulnerability in Supermicro B12dpe-6, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2023-12-07.
How severe is CVE-2023-33413?: High severity. CVSS v3 base score is 8.8 out of 10.