high7.2
CVE-2023-40289
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
Impact
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Supermicro | X11ssm-F Firmware | Version 1.66 |
| Supermicro | X11sae-F Firmware | Version 1.66 |
| Supermicro | X11sse-F Firmware | Version 1.66 |