CVE-2023-35861 : A shell-injection vulnerability in email notifications on Supermicro motherboard

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.

Published 2023-07-31 13:15:10

Updated 2023-08-07 19:19:26

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2023-35861

Supermicro » X12dai-n6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dai-n6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dai-n6 » Version: N/A
Supermicro » X12ddw-a6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12ddw-a6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12ddw-a6 » Version: N/A
Supermicro » X12dpg-qt6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpg-qt6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpg-qt6 » Version: N/A
Supermicro » X12dpi-n6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpi-n6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpi-n6 » Version: N/A
Supermicro » X12dpi-nt6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpi-nt6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpi-nt6 » Version: N/A
Supermicro » X12dpl-i6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpl-i6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpl-i6 » Version: N/A
Supermicro » X12dpl-nt6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpl-nt6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpl-nt6 » Version: N/A
Supermicro » X12spa-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spa-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spa-tf » Version: N/A
Supermicro » X12spi-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spi-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spi-tf » Version: N/A
Supermicro » X12spl-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spl-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spl-f » Version: N/A
Supermicro » X12spl-ln4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spl-ln4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spl-ln4f » Version: N/A
Supermicro » X12spm-ln4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spm-ln4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spm-ln4f » Version: N/A
Supermicro » X12spm-ln6tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spm-ln6tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spm-ln6tf » Version: N/A
Supermicro » X12spm-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spm-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spm-tf » Version: N/A
Supermicro » X12spo-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spo-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spo-f » Version: N/A
Supermicro » X12spo-ntf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spo-ntf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spo-ntf » Version: N/A
Supermicro » X12spw-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spw-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spw-f » Version: N/A
Supermicro » X12spw-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spw-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spw-tf » Version: N/A
Supermicro » X12spz-ln4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spz-ln4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spz-ln4f » Version: N/A
Supermicro » X12spz-spln6f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spz-spln6f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spz-spln6f » Version: N/A
Supermicro » H12ssg-anp6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssg-anp6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssg-anp6 » Version: N/A
Supermicro » H12ssw-in Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssw-in_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssw-in » Version: N/A
Supermicro » H12ssw-nt Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssw-nt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssw-nt » Version: N/A
Supermicro » H12ssw-inl Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssw-inl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssw-inl » Version: N/A
Supermicro » H12ssw-ntl Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssw-ntl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssw-ntl » Version: N/A
Supermicro » H12sst-ps Firmware » Version: N/A
cpe:2.3:o:supermicro:h12sst-ps_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12sst-ps » Version: N/A
Supermicro » H12ssl-i Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssl-i_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssl-i » Version: N/A
Supermicro » H12ssl-c Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssl-c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssl-c » Version: N/A
Supermicro » H12ssl-ct Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssl-ct_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssl-ct » Version: N/A
Supermicro » H12ssl-nt Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssl-nt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssl-nt » Version: N/A
Supermicro » H12ssw-inr Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssw-inr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssw-inr » Version: N/A
Supermicro » H12ssw-ntr Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssw-ntr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssw-ntr » Version: N/A
Supermicro » H12ssff-an6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssff-an6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssff-an6 » Version: N/A
Supermicro » H12dsu-in Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dsu-in_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dsu-in » Version: N/A
Supermicro » H12dst-b Firmware
Versions before (<) 03.10.35
cpe:2.3:o:supermicro:h12dst-b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dst-b » Version: N/A
Supermicro » H12dst-b Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dst-b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dst-b » Version: N/A
Supermicro » H12dsu-inr Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dsu-inr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dsu-inr » Version: N/A
Supermicro » H12dgo-6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dgo-6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dgo-6 » Version: N/A
Supermicro » H12dsg-o-cpu Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dsg-o-cpu_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dsg-o-cpu » Version: N/A
Supermicro » H12dsi-n6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dsi-n6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dsi-n6 » Version: N/A
Supermicro » H12dsi-nt6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dsi-nt6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dsi-nt6 » Version: N/A
Supermicro » X13dai-t Firmware » Version: N/A
cpe:2.3:o:supermicro:x13dai-t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13dai-t » Version: N/A
Supermicro » X13ddw-a Firmware » Version: N/A
cpe:2.3:o:supermicro:x13ddw-a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13ddw-a » Version: N/A
Supermicro » X13deg-oa Firmware » Version: N/A
cpe:2.3:o:supermicro:x13deg-oa_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13deg-oa » Version: N/A
Supermicro » X13deg-oad Firmware » Version: N/A
cpe:2.3:o:supermicro:x13deg-oad_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13deg-oad » Version: N/A
Supermicro » X13deg-pvc Firmware » Version: N/A
cpe:2.3:o:supermicro:x13deg-pvc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13deg-pvc » Version: N/A
Supermicro » X13deg-qt Firmware » Version: N/A
cpe:2.3:o:supermicro:x13deg-qt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13deg-qt » Version: N/A
Supermicro » X13dei Firmware » Version: N/A
cpe:2.3:o:supermicro:x13dei_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13dei » Version: N/A
Supermicro » X13dei-t Firmware » Version: N/A
cpe:2.3:o:supermicro:x13dei-t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13dei-t » Version: N/A
Supermicro » X13dem Firmware » Version: N/A
cpe:2.3:o:supermicro:x13dem_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13dem » Version: N/A
Supermicro » X13det-b Firmware » Version: N/A
cpe:2.3:o:supermicro:x13det-b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13det-b » Version: N/A
Supermicro » X13dgu Firmware » Version: N/A
cpe:2.3:o:supermicro:x13dgu_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13dgu » Version: N/A
Supermicro » X13dsf-a Firmware » Version: N/A
cpe:2.3:o:supermicro:x13dsf-a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13dsf-a » Version: N/A
Supermicro » X13qeh+ Firmware » Version: N/A
cpe:2.3:o:supermicro:x13qeh\+_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13qeh+ » Version: N/A
Supermicro » X13sae Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sae_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sae » Version: N/A
Supermicro » X13sae-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sae-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sae-f » Version: N/A
Supermicro » X13san-c Firmware » Version: N/A
cpe:2.3:o:supermicro:x13san-c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13san-c » Version: N/A
Supermicro » X13san-c-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x13san-c-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13san-c-wohs » Version: N/A
Supermicro » X13san-e Firmware » Version: N/A
cpe:2.3:o:supermicro:x13san-e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13san-e » Version: N/A
Supermicro » X13san-e-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x13san-e-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13san-e-wohs » Version: N/A
Supermicro » X13san-h Firmware » Version: N/A
cpe:2.3:o:supermicro:x13san-h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13san-h » Version: N/A
Supermicro » X13san-h-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x13san-h-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13san-h-wohs » Version: N/A
Supermicro » X13san-l Firmware » Version: N/A
cpe:2.3:o:supermicro:x13san-l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13san-l » Version: N/A
Supermicro » X13san-l-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x13san-l-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13san-l-wohs » Version: N/A
Supermicro » X13saq Firmware » Version: N/A
cpe:2.3:o:supermicro:x13saq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13saq » Version: N/A
Supermicro » X13sav-lvds Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sav-lvds_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sav-lvds » Version: N/A
Supermicro » X13sav-ps Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sav-ps_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sav-ps » Version: N/A
Supermicro » X13saz-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x13saz-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13saz-f » Version: N/A
Supermicro » X13saz-q Firmware » Version: N/A
cpe:2.3:o:supermicro:x13saz-q_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13saz-q » Version: N/A
Supermicro » X13sedw-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sedw-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sedw-f » Version: N/A
Supermicro » X13seed-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x13seed-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13seed-f » Version: N/A
Supermicro » X13seed-sf Firmware » Version: N/A
cpe:2.3:o:supermicro:x13seed-sf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13seed-sf » Version: N/A
Supermicro » X13sefr-a Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sefr-a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sefr-a » Version: N/A
Supermicro » X13sei-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sei-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sei-f » Version: N/A
Supermicro » X13sei-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sei-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sei-tf » Version: N/A
Supermicro » X13sem-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sem-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sem-f » Version: N/A
Supermicro » X13sem-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sem-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sem-tf » Version: N/A
Supermicro » X13set-g Firmware » Version: N/A
cpe:2.3:o:supermicro:x13set-g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13set-g » Version: N/A
Supermicro » X13set-gc Firmware » Version: N/A
cpe:2.3:o:supermicro:x13set-gc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13set-gc » Version: N/A
Supermicro » X13sew-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sew-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sew-f » Version: N/A
Supermicro » X13sew-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sew-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sew-tf » Version: N/A
Supermicro » X13sra-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x13sra-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13sra-tf » Version: N/A
Supermicro » X13srn-e Firmware » Version: N/A
cpe:2.3:o:supermicro:x13srn-e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13srn-e » Version: N/A
Supermicro » X13srn-e-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x13srn-e-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13srn-e-wohs » Version: N/A
Supermicro » X13srn-h Firmware » Version: N/A
cpe:2.3:o:supermicro:x13srn-h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13srn-h » Version: N/A
Supermicro » X13srn-h-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x13srn-h-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13srn-h-wohs » Version: N/A
Supermicro » X13swa-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x13swa-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X13swa-tf » Version: N/A
Supermicro » H13dsg-o-cpu Firmware » Version: N/A
cpe:2.3:o:supermicro:h13dsg-o-cpu_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13dsg-o-cpu » Version: N/A
Supermicro » H13dsg-o-cpu-d Firmware » Version: N/A
cpe:2.3:o:supermicro:h13dsg-o-cpu-d_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13dsg-o-cpu-d » Version: N/A
Supermicro » H13dsh Firmware » Version: N/A
cpe:2.3:o:supermicro:h13dsh_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13dsh » Version: N/A
Supermicro » H13sae-mf Firmware » Version: N/A
cpe:2.3:o:supermicro:h13sae-mf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13sae-mf » Version: N/A
Supermicro » H13srd-f Firmware » Version: N/A
cpe:2.3:o:supermicro:h13srd-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13srd-f » Version: N/A
Supermicro » H13ssf Firmware » Version: N/A
cpe:2.3:o:supermicro:h13ssf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13ssf » Version: N/A
Supermicro » H13ssh Firmware » Version: N/A
cpe:2.3:o:supermicro:h13ssh_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13ssh » Version: N/A
Supermicro » H13ssl-n Firmware » Version: N/A
cpe:2.3:o:supermicro:h13ssl-n_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13ssl-n » Version: N/A
Supermicro » H13ssl-nt Firmware » Version: N/A
cpe:2.3:o:supermicro:h13ssl-nt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13ssl-nt » Version: N/A
Supermicro » H13sst-g Firmware » Version: N/A
cpe:2.3:o:supermicro:h13sst-g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13sst-g » Version: N/A
Supermicro » H13sst-gc Firmware » Version: N/A
cpe:2.3:o:supermicro:h13sst-gc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13sst-gc » Version: N/A
Supermicro » H13ssw Firmware » Version: N/A
cpe:2.3:o:supermicro:h13ssw_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H13ssw » Version: N/A
Supermicro » X12dgo-6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dgo-6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dgo-6 » Version: N/A
Supermicro » X12dgq-r Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dgq-r_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dgq-r » Version: N/A
Supermicro » X12dgu Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dgu_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dgu » Version: N/A
Supermicro » X12dhm-6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dhm-6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dhm-6 » Version: N/A
Supermicro » X12dpd-a6m25 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpd-a6m25_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpd-a6m25 » Version: N/A
Supermicro » X12dpfr-an6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpfr-an6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpfr-an6 » Version: N/A
Supermicro » X12dpg-ar Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpg-ar_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpg-ar » Version: N/A
Supermicro » X12dpg-oa6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpg-oa6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpg-oa6 » Version: N/A
Supermicro » X12dpg-oa6-gd2 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpg-oa6-gd2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpg-oa6-gd2 » Version: N/A
Supermicro » X12dpg-qbt6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpg-qbt6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpg-qbt6 » Version: N/A
Supermicro » X12dpg-qr Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpg-qr_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpg-qr » Version: N/A
Supermicro » X12dpg-u6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpg-u6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpg-u6 » Version: N/A
Supermicro » X12dpt-b6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpt-b6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpt-b6 » Version: N/A
Supermicro » X12dpt-pt46 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpt-pt46_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpt-pt46 » Version: N/A
Supermicro » X12dpt-pt6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpt-pt6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpt-pt6 » Version: N/A
Supermicro » X12dpu-6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dpu-6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dpu-6 » Version: N/A
Supermicro » X12dsc-6 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12dsc-6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12dsc-6 » Version: N/A
Supermicro » X12qch+ Firmware » Version: N/A
cpe:2.3:o:supermicro:x12qch\+_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12qch+ » Version: N/A
Supermicro » X12sae Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sae_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sae » Version: N/A
Supermicro » X12sae-5 Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sae-5_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sae-5 » Version: N/A
Supermicro » X12sca-5f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sca-5f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sca-5f » Version: N/A
Supermicro » X12sca-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sca-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sca-f » Version: N/A
Supermicro » X12scq Firmware » Version: N/A
cpe:2.3:o:supermicro:x12scq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12scq » Version: N/A
Supermicro » X12scv-lvds Firmware » Version: N/A
cpe:2.3:o:supermicro:x12scv-lvds_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12scv-lvds » Version: N/A
Supermicro » X12scv-w Firmware » Version: N/A
cpe:2.3:o:supermicro:x12scv-w_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12scv-w » Version: N/A
Supermicro » X12scz-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12scz-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12scz-f » Version: N/A
Supermicro » X12scz-qf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12scz-qf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12scz-qf » Version: N/A
Supermicro » X12scz-tln4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12scz-tln4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12scz-tln4f » Version: N/A
Supermicro » X12sdv-10c-sp6f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-10c-sp6f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-10c-sp6f » Version: N/A
Supermicro » X12sdv-10c-spt4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-10c-spt4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-10c-spt4f » Version: N/A
Supermicro » X12sdv-14c-spt8f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-14c-spt8f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-14c-spt8f » Version: N/A
Supermicro » X12sdv-16c-spt8f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-16c-spt8f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-16c-spt8f » Version: N/A
Supermicro » X12sdv-20c-spt8f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-20c-spt8f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-20c-spt8f » Version: N/A
Supermicro » X12sdv-4c-sp6f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-4c-sp6f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-4c-sp6f » Version: N/A
Supermicro » X12sdv-4c-spt4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-4c-spt4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-4c-spt4f » Version: N/A
Supermicro » X12sdv-4c-spt8f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-4c-spt8f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-4c-spt8f » Version: N/A
Supermicro » X12sdv-8c-sp6f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-8c-sp6f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-8c-sp6f » Version: N/A
Supermicro » X12sdv-8c-spt4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-8c-spt4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-8c-spt4f » Version: N/A
Supermicro » X12sdv-8c-spt8f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-8c-spt8f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-8c-spt8f » Version: N/A
Supermicro » X12sdv-8ce-sp4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sdv-8ce-sp4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sdv-8ce-sp4f » Version: N/A
Supermicro » X12sped-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sped-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sped-f » Version: N/A
Supermicro » X12spg-nf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spg-nf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spg-nf » Version: N/A
Supermicro » X12spt-g Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spt-g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spt-g » Version: N/A
Supermicro » X12spt-gc Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spt-gc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spt-gc » Version: N/A
Supermicro » X12spt-pt Firmware » Version: N/A
cpe:2.3:o:supermicro:x12spt-pt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12spt-pt » Version: N/A
Supermicro » X12std-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12std-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12std-f » Version: N/A
Supermicro » X12ste-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12ste-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12ste-f » Version: N/A
Supermicro » X12sth-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sth-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sth-f » Version: N/A
Supermicro » X12sth-ln4f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sth-ln4f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sth-ln4f » Version: N/A
Supermicro » X12sth-sys Firmware » Version: N/A
cpe:2.3:o:supermicro:x12sth-sys_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12sth-sys » Version: N/A
Supermicro » X12stl-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stl-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stl-f » Version: N/A
Supermicro » X12stl-if Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stl-if_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stl-if » Version: N/A
Supermicro » X12stn-c Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stn-c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stn-c » Version: N/A
Supermicro » X12stn-c-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stn-c-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stn-c-wohs » Version: N/A
Supermicro » X12stn-e Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stn-e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stn-e » Version: N/A
Supermicro » X12stn-e-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stn-e-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stn-e-wohs » Version: N/A
Supermicro » X12stn-h Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stn-h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stn-h » Version: N/A
Supermicro » X12stn-h-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stn-h-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stn-h-wohs » Version: N/A
Supermicro » X12stn-l Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stn-l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stn-l » Version: N/A
Supermicro » X12stn-l-wohs Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stn-l-wohs_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stn-l-wohs » Version: N/A
Supermicro » X12stw-f Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stw-f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stw-f » Version: N/A
Supermicro » X12stw-tf Firmware » Version: N/A
cpe:2.3:o:supermicro:x12stw-tf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » X12stw-tf » Version: N/A
Supermicro » H12ssw-an6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssw-an6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssw-an6 » Version: N/A
Supermicro » H12ssg-an6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssg-an6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssg-an6 » Version: N/A
Supermicro » H12ssfr-an6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12ssfr-an6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12ssfr-an6 » Version: N/A
Supermicro » H12dsg-q-cpu6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dsg-q-cpu6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dsg-q-cpu6 » Version: N/A
Supermicro » H12dgq-nt6 Firmware » Version: N/A
cpe:2.3:o:supermicro:h12dgq-nt6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Supermicro » H12dgq-nt6 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-35861

EPSS FAQ

0.18%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 56 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-35861

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-35861

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-35861

https://blog.freax13.de/cve/cve-2023-35861

Exploiting Supermicro BMCs So I Can Sleep At Night | freax13’s blog
Exploit;Third Party Advisory
https://www.supermicro.com/en/support/security_SMTP_Jun_2023

Shell injection in the SMTP notifications | Supermicro
Vendor Advisory
https://www.supermicro.com/en/products/motherboards

Technologically Advanced High-End Motherboards | Supermicro
Product

Jump to

Vulnerability Details : CVE-2023-35861

Products affected by CVE-2023-35861

Exploit prediction scoring system (EPSS) score for CVE-2023-35861

CVSS scores for CVE-2023-35861

CWE ids for CVE-2023-35861

References for CVE-2023-35861