Detections
Analytics
CVE-2023-40289
high
Description
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
References
https://github.com/s-hamann/CVE-2023-40289
https://www.ic3.gov/Media/News/2024/241010.pdf
https://www.supermicro.com/en/support/security_center#%21advisories
https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023