CVE Watch9 jul 2026

CVE-2023-33412

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro

CVSS

8.8

Alto

EPSS

1.2%

p63

KEV

—

Exploit Today

0-100

Publicado: 7 dic 2023 · Última mod.: 9 jul 2026

EPSS · 30d

1.2%EPSS · 30 días1.2%

2026-06-302026-07-16

Descripción técnica

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.

Referencias oficiales

www.supermicro.comhttps://www.supermicro.com/en/support/security_BMC_Dec_2023
www.supermicro.comhttps://www.supermicro.com/en/support/security_BMC_Dec_2023

CVEs relacionados

Sin CVEs relacionados por CWE o producto.