Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-40290	Analizada	Alta (8.3)	0.70%	—	Supermicro X11ssm-f Firmware Supermicro X11sae-f Firmware Supermicro X11sse-f Firmware	27/3/2024	17/6/2026	An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.
CVE-2023-40289	Analizada	Alta (7.2)	18%	💥 PoC	Supermicro X11ssm-f Firmware Supermicro X11sae-f Firmware Supermicro X11sse-f Firmware	27/3/2024	17/6/2026	A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
CVE-2023-40288	Analizada	Alta (8.3)	0.60%	—	Supermicro X11ssm-f Firmware Supermicro X11sae-f Firmware Supermicro X11sse-f Firmware	27/3/2024	17/6/2026	An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-40287	Analizada	Alta (8.3)	0.60%	—	Supermicro X11ssm-f Firmware Supermicro X11sae-f Firmware Supermicro X11sse-f Firmware	27/3/2024	17/6/2026	An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-40286	Analizada	Alta (8.3)	0.60%	—	Supermicro X11ssm-f Firmware Supermicro X11sae-f Firmware Supermicro X11sse-f Firmware	27/3/2024	17/6/2026	An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-40285	Analizada	Media (6.5)	0.63%	—	Supermicro X11ssm-f Firmware Supermicro X11sae-f Firmware Supermicro X11sse-f Firmware	27/3/2024	17/6/2026	An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-40284	Analizada	Alta (8.3)	0.79%	—	Supermicro X11ssm-f Firmware Supermicro X11sae-f Firmware Supermicro X11sse-f Firmware	27/3/2024	17/6/2026	An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVE-2023-33413	Modificada	Alta (8.8)	0.96%	—	Supermicro M11sdv-4c-ln4f Firmware Supermicro M11sdv-4ct-ln4f Firmware Supermicro M11sdv-8c-ln4f Firmware Supermicro M11sdv-8ct-ln4f Firmware+358	7/12/2023	9/7/2026	The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands.
CVE-2023-33412	Modificada	Alta (8.8)	1.2%	—	Supermicro M11sdv-4c-ln4f Firmware Supermicro M11sdv-4ct-ln4f Firmware Supermicro M11sdv-8c-ln4f Firmware Supermicro M11sdv-8ct-ln4f Firmware+358	7/12/2023	9/7/2026	The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi…
CVE-2023-33411	Modificada	Alta (7.5)	1.3%	—	Supermicro M11sdv-4c-ln4f Firmware Supermicro M11sdv-4ct-ln4f Firmware Supermicro M11sdv-8c-ln4f Firmware Supermicro M11sdv-8ct-ln4f Firmware+358	7/12/2023	9/7/2026	A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.