X11ssm-f Firmware vulnerabilities

2 known vulnerabilities in X11ssm-f Firmware from Supermicro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  x11ssm-f_firmware: Improper Neutralization of Input During Web Page Generation

  CVE-2023-40290Mar 27, 2024Supermicro

  An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.

• 7.2 High severity

  x11ssm-f: Improper Privilege Management

  CVE-2023-40289Mar 27, 2024SupermicroEPSS 18.4%

  A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.