Supermicro BMC vulnerabilities
3 known CVE vulnerabilities in Supermicro BMC, translated and rated.
- CVE-2026-3820High
A vulnerability in the Supermicro BMC SMTP service on model AS-2115HS-TNR allows an attacker to gain administrator privileges and inject specially crafted characters into the SMTP configuration, potentially causing unintended command execution during process invocation.
- CVE-2023-33412High
A vulnerability in the web interface of the BMC (IPMI) on Supermicro X11 and M11 devices with firmware versions before 3.17.02 allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable CGI endpoints.
- CVE-2023-33411High
A web server in the BMC (IPMI) implementation on Supermicro X11 and M11 devices with firmware up to 3.17.02 allows remote unauthenticated attackers to perform directory traversal, potentially disclosing sensitive information.