CVE-2022-43309

MediumCVSS 5.5

Published: 07/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Insecure permissions were discovered in BMC firmware version 1.63 for the Supermicro X11SSL-CF HW Rev 1.01 motherboard. This vulnerability could allow unauthorized users to access sensitive system management functions.

Risk Assessment

Insecure permissions may allow an attacker to take control of the motherboard, risking data confidentiality, integrity, and server availability.

Recommendation

Immediately update the BMC firmware to the latest version and configure appropriate access policies to mitigate the risk.

Original NVD description (English source)

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.