CVE-2023-33411

Katalog CVE

CVSS 7.5 · High EPSS 1,3%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada supermicro m11sdv-4c-ln4f firmware, supermicro m11sdv-4ct-ln4f firmware +58 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.

Rincian

Terbit di NVD

7 Desember 2023

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 362 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.supermicro.com/en/support/security_BMC_Dec_2023 advisory vendor