Vulnerability Details CVE-2023-40289
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.6%
CVSS Severity
CVSS v3 Score 7.2
References
Products affected by CVE-2023-40289
-
cpe:2.3:h:supermicro:x11sae-f:-
-
cpe:2.3:h:supermicro:x11sse-f:-
-
cpe:2.3:h:supermicro:x11ssm-f:-
-
cpe:2.3:o:supermicro:x11sae-f_firmware:1.66
-
cpe:2.3:o:supermicro:x11sse-f_firmware:1.66
-
cpe:2.3:o:supermicro:x11ssm-f_firmware:1.66