Vulnerability CVE-2023-33411


Published: 2023-12-07   Modified: 2023-12-14

Description:
A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.

Type:

CWE-22

(Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))

 References:
http://supermicro.com
https://www.supermicro.com/en/support/security_BMC_Dec_2023

Copyright 2026, cxsecurity.com

 

Back to Top