SU
Vendor
Supermicro
756
CVEs
0
On KEV
0
New 30D
Products
XF8.3
X11sae-f Firmware
Supermicro
7 CVEs0 on KEV0 new
XF8.3
X11sse-f Firmware
Supermicro
7 CVEs0 on KEV0 new
XF8.3
X11ssm-f Firmware
Supermicro
7 CVEs0 on KEV0 new
HF9.8
H13dsg-o-cpu-d Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13dsg-o-cpu Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13dsh Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13sae-mf Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13srd-f Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13ssf Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13ssh Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13ssl-n Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13ssl-nt Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13sst-g Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13sst-gc Firmware
Supermicro
4 CVEs0 on KEV0 new
HF9.8
H13ssw Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13dai-t Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13ddw-a Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13deg-oa Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13deg-oad Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13deg-pvc Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13deg-qt Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13dei Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13dei-t Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13dem Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13det-b Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13dgu Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13dsf-a Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13qeh+ Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13sae-f Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13sae Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13san-c Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13san-c-wohs Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13san-e Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13san-e-wohs Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13san-h Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13san-h-wohs Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13san-l Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13san-l-wohs Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13saq Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13sav-lvds Firmware
Supermicro
4 CVEs0 on KEV0 new
XF9.8
X13sav-ps Firmware
Supermicro
4 CVEs0 on KEV0 new
BF8.8
B13dee Firmware
Supermicro
3 CVEs0 on KEV0 new
BF8.8
B13det Firmware
Supermicro
3 CVEs0 on KEV0 new
BF8.8
B13see-cpu-25g Firmware
Supermicro
3 CVEs0 on KEV0 new
BF8.8
B13seg Firmware
Supermicro
3 CVEs0 on KEV0 new
CF8.8
C9x299-pg Firmware
Supermicro
3 CVEs0 on KEV0 new
CF8.8
C9x299-pg300 Firmware
Supermicro
3 CVEs0 on KEV0 new
CF8.8
C9x299-pg300f Firmware
Supermicro
3 CVEs0 on KEV0 new
CF8.8
C9x299-pgf Firmware
Supermicro
3 CVEs0 on KEV0 new
CF8.8
C9x299-pgf-l Firmware
Supermicro
3 CVEs0 on KEV0 new
CF8.8
C9x299-rpgf Firmware
Supermicro
3 CVEs0 on KEV0 new
CF8.8
C9x299-rpgf-l Firmware
Supermicro
3 CVEs0 on KEV0 new
HF8.8
H13dsg-om Firmware
Supermicro
3 CVEs0 on KEV0 new
HF8.8
H13sra-f Firmware
Supermicro
3 CVEs0 on KEV0 new
HF8.8
H13sra-tf Firmware
Supermicro
3 CVEs0 on KEV0 new
HF8.8
H13svw-n Firmware
Supermicro
3 CVEs0 on KEV0 new
HF8.8
H13svw-nt Firmware
Supermicro
3 CVEs0 on KEV0 new
H8–
H8dcl-6f
Supermicro
3 CVEs0 on KEV0 new
H8–
H8dcl-if
Supermicro
3 CVEs0 on KEV0 new
H8–
H8dct-hibqf
Supermicro
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-40290 | XF X11ssm-f Firmware Supermicro | 8.3 | Mar 27 | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices |
| CVE-2023-40289 | XF X11ssm-f Firmware Supermicro | 7.2 | Mar 27 | A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices |
| CVE-2023-40288 | XF X11ssm-f Firmware Supermicro | 8.3 | Mar 27 | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices |
| CVE-2023-40287 | XF X11ssm-f Firmware Supermicro | 8.3 | Mar 27 | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices |
| CVE-2023-40286 | XF X11ssm-f Firmware Supermicro | 8.3 | Mar 27 | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices |
| CVE-2023-40285 | XF X11ssm-f Firmware Supermicro | 6.5 | Mar 27 | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices |
| CVE-2023-40284 | XF X11ssm-f Firmware Supermicro | 8.3 | Mar 27 | An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices |
| CVE-2023-33413 | MF M11sdv-4c-ln4f Firmware Supermicro | 8.8 | Dec 7 | The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based… |
| CVE-2023-33412 | MF M11sdv-4c-ln4f Firmware Supermicro | 8.8 | Dec 7 | The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with… |
| CVE-2023-33411 | XF X13saq Firmware Supermicro | 7.5 | Dec 7 | A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware… |
| CVE-2023-34853 | XF X12dai-n6 Firmware Supermicro | 7.8 | Aug 22 | Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable |
| CVE-2023-35861 | XF X13srn-h-wohs Firmware Supermicro | 9.8 | Jul 31 | A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands… |
| CVE-2022-43309 | XF X11ssl-cf Firmware Supermicro | 5.5 | Apr 7 | Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions |
| CVE-2021-22887 | XF X10sll-sf Firmware Supermicro | 2.3 | Mar 16 | A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware |
| CVE-2020-15046 | XB X10drh-it Bios Supermicro | 8.8 | Jun 24 | The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/config_user.cgi CSRF issue to add new admin… |
| CVE-2013-6785 | IP Intelligent Platform Management Interface Supermicro | 4.3 | Jan 23 | Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter |
| CVE-2013-3620 | SX Smt X9 Firmware Supermicro | 7.5 | Jan 2 | Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for… |
| CVE-2013-3619 | SX Smt X9 Firmware Supermicro | 8.1 | Jan 2 | Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards… |
| CVE-2019-19642 | XB X8sti-f Bios Supermicro | 8.8 | Dec 8 | On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP… |
| CVE-2019-16650 | XF X11dai-n Firmware Supermicro | 10.0 | Sep 21 | On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number |
| CVE-2019-16649 | XF X11dai-n Firmware Supermicro | 10.0 | Sep 21 | On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and… |
| CVE-2019-13131 | S5 Superdoctor 5 Supermicro | 9.8 | Jul 1 | Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE |
| CVE-2018-13787 | XF X10drg Firmware Supermicro | 6.7 | Jul 9 | Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware |
| CVE-2013-3623 | IP Intelligent Platform Management Firmware Supermicro | – | Dec 10 | Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315)… |
| CVE-2013-3622 | IP Intelligent Platform Management Firmware Supermicro | – | Dec 10 | Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote… |
| CVE-2013-3609 | H8 H8dcl-6f Supermicro | – | Sep 8 | The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*,… |
| CVE-2013-3608 | X9 X9dax-itf Supermicro | – | Sep 8 | The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*,… |
| CVE-2013-3607 | H8 H8dct-hln4f Supermicro | – | Sep 8 | Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F,… |
| CVE-2013-4782 | BM Bmc Supermicro | – | Jul 8 | The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary… |
