high7.8
CVE-2023-34853
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupV…
Impact
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Supermicro | X12dai-N6 Firmware | All versions |
| Supermicro | X12ddw-A6 Firmware | All versions |
| Supermicro | X12dgo-6 Firmware | All versions |
| Supermicro | X12dgq-R Firmware | All versions |
| Supermicro | X12dgu Firmware | All versions |
| Supermicro | X12dhm-6 Firmware | All versions |
| Supermicro | X12dpd-A6m25 Firmware | All versions |
| Supermicro | X12dpfr-An6 Firmware | All versions |
| Supermicro | X12dpg-Ar Firmware | All versions |
| Supermicro | X12dpg-Oa6 Firmware | All versions |
| Supermicro | X12dpg-Oa6-Gd2 Firmware | All versions |
| Supermicro | X12dpg-Qbt6 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.supermicro.com/Bios/softfiles/17136/X12DPG-QR_1.4b_X1.02.61_SUM2.10.0.zip.
- https://www.supermicro.com/en/support/security_BIOS_Aug_2023
- https://www.supermicro.com/Bios/softfiles/17136/X12DPG-QR_1.4b_X1.02.61_SUM2.10.0.zip.
- https://www.supermicro.com/en/support/security_BIOS_Aug_2023