← Vulnerability feed

Vulnerability record · CVE-2023-33412 · published 7 December 2023

CVE-2023-33412: Supermicro m11sdv-4c-ln4f firmware vulnerability

Supermicro · M11sdv 4c Ln4f Firmware

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.

8.8 CVSS 3.1 High EPSS 1.2% · top 33.9%
8.8CVSS 3.1 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
2References
9 Jul 2026Last modified by NVD

Description

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.supermicro.com/en/support/security_BMC_Dec_2023 Vendor Advisory
https://www.supermicro.com/en/support/security_BMC_Dec_2023 Vendor Advisory

Track CVE-2023-33412 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2023-33413Supermicro m11sdv-4c-ln4f firmware hard-coded credentials vulnerabilityThe configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Super…EPSS 0.96%7.5CVE-2023-33411Supermicro m11sdv-4c-ln4f firmware path traversal vulnerabilityA web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 b…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2023-33412), CISA KEV, FIRST EPSS (scores of 2026-10-10). This page is refreshed as NVD updates the record.