{"answers":{"affected":"It affects 362 products.","exploited":"There is no known exploitation of CVE-2023-33412 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2023-33412 yet. Limit exposure of the affected software until one is available.","what":"CVE-2023-33412 is a high-severity command injection vulnerability in n/a, published on 7 Dec 2023. Any signed-in user can exploit it over the network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2023-33412 and fix it if it is affected.\n\nWhat it is: CVE-2023-33412 is a high-severity command injection vulnerability in n/a, published on 7 Dec 2023. Any signed-in user can exploit it over the network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2023-33412 in the wild and no public exploit code.\n\nAffected product: n/a. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2023-33412/ (Markdown: https://insights.sbomify.com/CVE-2023-33412/index.md)","id":"CVE-2023-33412","markdown":"https://insights.sbomify.com/CVE-2023-33412/index.md","name":"CVE-2023-33412","record":{"aliases":["GHSA-283r-fx38-xwrx"],"analysis":{"component_type":"hardware_firmware","fix_type":"upgrade","impacts":["code_execution"],"network_reachable":"yes","non_default_config":false,"product_category":"Supermicro BMC firmware","requires_auth":"low_privilege","summary":"Remote authenticated attackers can execute arbitrary commands on Supermicro BMC devices via crafted requests to vulnerable CGI endpoints.","user_interaction":"not_required","vuln_class":"command_injection"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"mitre","cpe":[{"product":"b12dpe-6_firmware","vendor":"supermicro"},{"product":"b12dpt-6_firmware","vendor":"supermicro"},{"product":"b12spe-cpu-25g_firmware","vendor":"supermicro"},{"product":"b13dee_firmware","vendor":"supermicro"},{"product":"b13det_firmware","vendor":"supermicro"},{"product":"b13see-cpu-25g_firmware","vendor":"supermicro"},{"product":"b13seg_firmware","vendor":"supermicro"},{"product":"c9x299-pg300_firmware","vendor":"supermicro"},{"product":"c9x299-pg300f_firmware","vendor":"supermicro"},{"product":"c9x299-pg_firmware","vendor":"supermicro"},{"product":"c9x299-pgf-l_firmware","vendor":"supermicro"},{"product":"c9x299-pgf_firmware","vendor":"supermicro"},{"product":"c9x299-rpgf-l_firmware","vendor":"supermicro"},{"product":"c9x299-rpgf_firmware","vendor":"supermicro"},{"product":"h12dgo-6_firmware","vendor":"supermicro"},{"product":"h12dgq-nt6_firmware","vendor":"supermicro"},{"product":"h12dsg-o-cpu_firmware","vendor":"supermicro"},{"product":"h12dsg-q-cpu6_firmware","vendor":"supermicro"},{"product":"h12dsi-n6_firmware","vendor":"supermicro"},{"product":"h12dsi-nt6_firmware","vendor":"supermicro"},{"product":"h12dst-b_firmware","vendor":"supermicro"},{"product":"h12dsu-in_firmware","vendor":"supermicro"},{"product":"h12dsu-inr_firmware","vendor":"supermicro"},{"product":"h12ssff-an6_firmware","vendor":"supermicro"},{"product":"h12ssfr-an6_firmware","vendor":"supermicro"},{"product":"h12ssg-an6_firmware","vendor":"supermicro"},{"product":"h12ssg-anp6_firmware","vendor":"supermicro"},{"product":"h12ssl-c_firmware","vendor":"supermicro"},{"product":"h12ssl-ct_firmware","vendor":"supermicro"},{"product":"h12ssl-i_firmware","vendor":"supermicro"},{"product":"h12ssl-nt_firmware","vendor":"supermicro"},{"product":"h12sst-ps_firmware","vendor":"supermicro"},{"product":"h12ssw-an6_firmware","vendor":"supermicro"},{"product":"h12ssw-in_firmware","vendor":"supermicro"},{"product":"h12ssw-inl_firmware","vendor":"supermicro"},{"product":"h12ssw-inr_firmware","vendor":"supermicro"},{"product":"h12ssw-nt_firmware","vendor":"supermicro"},{"product":"h12ssw-ntl_firmware","vendor":"supermicro"},{"product":"h12ssw-ntr_firmware","vendor":"supermicro"},{"product":"h13dsg-o-cpu-d_firmware","vendor":"supermicro"},{"product":"h13dsg-o-cpu_firmware","vendor":"supermicro"},{"product":"h13dsg-om_firmware","vendor":"supermicro"},{"product":"h13dsh_firmware","vendor":"supermicro"},{"product":"h13sae-mf_firmware","vendor":"supermicro"},{"product":"h13sra-f_firmware","vendor":"supermicro"},{"product":"h13sra-tf_firmware","vendor":"supermicro"},{"product":"h13srd-f_firmware","vendor":"supermicro"},{"product":"h13ssf_firmware","vendor":"supermicro"},{"product":"h13ssh_firmware","vendor":"supermicro"},{"product":"h13ssl-n_firmware","vendor":"supermicro"},{"product":"h13ssl-nt_firmware","vendor":"supermicro"},{"product":"h13sst-g_firmware","vendor":"supermicro"},{"product":"h13sst-gc_firmware","vendor":"supermicro"},{"product":"h13ssw_firmware","vendor":"supermicro"},{"product":"h13svw-n_firmware","vendor":"supermicro"},{"product":"h13svw-nt_firmware","vendor":"supermicro"},{"product":"m11sdv-4c-ln4f_firmware","vendor":"supermicro"},{"product":"m11sdv-4ct-ln4f_firmware","vendor":"supermicro"},{"product":"m11sdv-8c-ln4f_firmware","vendor":"supermicro"},{"product":"m11sdv-8c\\+-ln4f_firmware","vendor":"supermicro"},{"product":"m11sdv-8ct-ln4f_firmware","vendor":"supermicro"},{"product":"x11dac_firmware","vendor":"supermicro"},{"product":"x11dai-n_firmware","vendor":"supermicro"},{"product":"x11ddw-l_firmware","vendor":"supermicro"},{"product":"x11ddw-nt_firmware","vendor":"supermicro"},{"product":"x11dgo-t_firmware","vendor":"supermicro"},{"product":"x11dgq_firmware","vendor":"supermicro"},{"product":"x11dpd-l_firmware","vendor":"supermicro"},{"product":"x11dpd-m25_firmware","vendor":"supermicro"},{"product":"x11dpff-sn_firmware","vendor":"supermicro"},{"product":"x11dpff-snr_firmware","vendor":"supermicro"},{"product":"x11dpfr-s_firmware","vendor":"supermicro"},{"product":"x11dpfr-sn_firmware","vendor":"supermicro"},{"product":"x11dpg-hgx2_firmware","vendor":"supermicro"},{"product":"x11dpg-ot-cpu_firmware","vendor":"supermicro"},{"product":"x11dpg-qt_firmware","vendor":"supermicro"},{"product":"x11dpg-sn_firmware","vendor":"supermicro"},{"product":"x11dph-i_firmware","vendor":"supermicro"},{"product":"x11dph-t_firmware","vendor":"supermicro"},{"product":"x11dph-tq_firmware","vendor":"supermicro"},{"product":"x11dpi-n_firmware","vendor":"supermicro"},{"product":"x11dpi-nt_firmware","vendor":"supermicro"},{"product":"x11dpl-i_firmware","vendor":"supermicro"},{"product":"x11dps-re_firmware","vendor":"supermicro"},{"product":"x11dpt-b_firmware","vendor":"supermicro"},{"product":"x11dpt-bh_firmware","vendor":"supermicro"},{"product":"x11dpt-br_firmware","vendor":"supermicro"},{"product":"x11dpt-l_firmware","vendor":"supermicro"},{"product":"x11dpt-ps_firmware","vendor":"supermicro"},{"product":"x11dpu-r_firmware","vendor":"supermicro"},{"product":"x11dpu-v_firmware","vendor":"supermicro"},{"product":"x11dpu-xll_firmware","vendor":"supermicro"},{"product":"x11dpu-z\\+_firmware","vendor":"supermicro"},{"product":"x11dpu-ze\\+_firmware","vendor":"supermicro"},{"product":"x11dpu_firmware","vendor":"supermicro"},{"product":"x11dpx-t_firmware","vendor":"supermicro"},{"product":"x11dsc\\+_firmware","vendor":"supermicro"},{"product":"x11dsc_firmware","vendor":"supermicro"},{"product":"x11dsf-e_firmware","vendor":"supermicro"},{"product":"x11dsn-ts_firmware","vendor":"supermicro"},{"product":"x11dsn-tsq_firmware","vendor":"supermicro"},{"product":"x11opi-cpu-cl_firmware","vendor":"supermicro"},{"product":"x11opi-cpu_firmware","vendor":"supermicro"},{"product":"x11qph\\+_firmware","vendor":"supermicro"},{"product":"x11qpl_firmware","vendor":"supermicro"},{"product":"x11saa_firmware","vendor":"supermicro"},{"product":"x11sae-f_firmware","vendor":"supermicro"},{"product":"x11sae-m_firmware","vendor":"supermicro"},{"product":"x11sae_firmware","vendor":"supermicro"},{"product":"x11san-wohs_firmware","vendor":"supermicro"},{"product":"x11san_firmware","vendor":"supermicro"},{"product":"x11sat-f_firmware","vendor":"supermicro"},{"product":"x11sat_firmware","vendor":"supermicro"},{"product":"x11sba-f_firmware","vendor":"supermicro"},{"product":"x11sba-ln4f_firmware","vendor":"supermicro"},{"product":"x11sca-f_firmware","vendor":"supermicro"},{"product":"x11sca-w_firmware","vendor":"supermicro"},{"product":"x11sca_firmware","vendor":"supermicro"},{"product":"x11scd-f_firmware","vendor":"supermicro"},{"product":"x11sce-f_firmware","vendor":"supermicro"},{"product":"x11sch-f_firmware","vendor":"supermicro"},{"product":"x11sch-ln4f_firmware","vendor":"supermicro"},{"product":"x11scl-f_firmware","vendor":"supermicro"},{"product":"x11scl-if_firmware","vendor":"supermicro"},{"product":"x11scl-ln4f_firmware","vendor":"supermicro"},{"product":"x11scm-f_firmware","vendor":"supermicro"},{"product":"x11scm-ln8f_firmware","vendor":"supermicro"},{"product":"x11scq-l_firmware","vendor":"supermicro"},{"product":"x11scq_firmware","vendor":"supermicro"},{"product":"x11scv-l_firmware","vendor":"supermicro"},{"product":"x11scv-q_firmware","vendor":"supermicro"},{"product":"x11scw-f_firmware","vendor":"supermicro"},{"product":"x11scz-f_firmware","vendor":"supermicro"},{"product":"x11scz-q_firmware","vendor":"supermicro"},{"product":"x11sdc-16c_firmware","vendor":"supermicro"},{"product":"x11sdc-4c_firmware","vendor":"supermicro"},{"product":"x11sdc-8c_firmware","vendor":"supermicro"},{"product":"x11sdd-18c-f_firmware","vendor":"supermicro"},{"product":"x11sdd-8c-f_firmware","vendor":"supermicro"},{"product":"x11sds-12c_firmware","vendor":"supermicro"},{"product":"x11sds-14c_firmware","vendor":"supermicro"},{"product":"x11sds-16c_firmware","vendor":"supermicro"},{"product":"x11sds-8c_firmware","vendor":"supermicro"},{"product":"x11sdv-12c-tln2f_firmware","vendor":"supermicro"},{"product":"x11sdv-12c-tp8f_firmware","vendor":"supermicro"},{"product":"x11sdv-16c-tln2f_firmware","vendor":"supermicro"},{"product":"x11sdv-16c-tp8f_firmware","vendor":"supermicro"},{"product":"x11sdv-16c\\+-tln2f_firmware","vendor":"supermicro"},{"product":"x11sdv-4c-tln2f_firmware","vendor":"supermicro"},{"product":"x11sdv-4c-tp8f-01_firmware","vendor":"supermicro"},{"product":"x11sdv-4c-tp8f_firmware","vendor":"supermicro"},{"product":"x11sdv-8c-tln2f_firmware","vendor":"supermicro"},{"product":"x11sdv-8c-tp8f_firmware","vendor":"supermicro"},{"product":"x11sdv-8c\\+-tln2f_firmware","vendor":"supermicro"},{"product":"x11sdw-12c-tp13f_firmware","vendor":"supermicro"},{"product":"x11sdw-14c-tp13f_firmware","vendor":"supermicro"},{"product":"x11sdw-14cn-tp13f\\+_firmware","vendor":"supermicro"},{"product":"x11sdw-14cnt-tp13f_firmware","vendor":"supermicro"},{"product":"x11sdw-16c-tp13f\\+_firmware","vendor":"supermicro"},{"product":"x11sdw-16c-tp13f_firmware","vendor":"supermicro"},{"product":"x11sdw-4c-tp13f\\+_firmware","vendor":"supermicro"},{"product":"x11sdw-4c-tp13f_firmware","vendor":"supermicro"},{"product":"x11sdw-8c-tp13f_firmware","vendor":"supermicro"},{"product":"x11spa-t_firmware","vendor":"supermicro"},{"product":"x11spa-tf_firmware","vendor":"supermicro"},{"product":"x11spd-f_firmware","vendor":"supermicro"},{"product":"x11spg-tf_firmware","vendor":"supermicro"},{"product":"x11sph-nctf_firmware","vendor":"supermicro"},{"product":"x11sph-nctpf_firmware","vendor":"supermicro"},{"product":"x11spi-tf_firmware","vendor":"supermicro"},{"product":"x11spl-f_firmware","vendor":"supermicro"},{"product":"x11spm-f_firmware","vendor":"supermicro"},{"product":"x11spm-tf_firmware","vendor":"supermicro"},{"product":"x11spm-tpf_firmware","vendor":"supermicro"},{"product":"x11spw-ctf_firmware","vendor":"supermicro"},{"product":"x11spw-tf_firmware","vendor":"supermicro"},{"product":"x11sra-f_firmware","vendor":"supermicro"},{"product":"x11sra-rf_firmware","vendor":"supermicro"},{"product":"x11sra_firmware","vendor":"supermicro"},{"product":"x11sri-if_firmware","vendor":"supermicro"},{"product":"x11srl-f_firmware","vendor":"supermicro"},{"product":"x11srm-f_firmware","vendor":"supermicro"},{"product":"x11srm-vf_firmware","vendor":"supermicro"},{"product":"x11ssa-f_firmware","vendor":"supermicro"},{"product":"x11ssd-f_firmware","vendor":"supermicro"},{"product":"x11sse-f_firmware","vendor":"supermicro"},{"product":"x11ssh-ctf_firmware","vendor":"supermicro"},{"product":"x11ssh-f_firmware","vendor":"supermicro"},{"product":"x11ssh-gf-1585_firmware","vendor":"supermicro"},{"product":"x11ssh-gf-1585l_firmware","vendor":"supermicro"},{"product":"x11ssh-gtf-1585_firmware","vendor":"supermicro"},{"product":"x11ssh-gtf-1585l_firmware","vendor":"supermicro"},{"product":"x11ssh-ln4f_firmware","vendor":"supermicro"},{"product":"x11ssh-tf_firmware","vendor":"supermicro"},{"product":"x11ssi-ln4f_firmware","vendor":"supermicro"},{"product":"x11ssl-cf_firmware","vendor":"supermicro"},{"product":"x11ssl-f_firmware","vendor":"supermicro"},{"product":"x11ssl-nf_firmware","vendor":"supermicro"},{"product":"x11ssl_firmware","vendor":"supermicro"},{"product":"x11ssm-f_firmware","vendor":"supermicro"},{"product":"x11ssm_firmware","vendor":"supermicro"},{"product":"x11ssn-e-001_firmware","vendor":"supermicro"},{"product":"x11ssn-e-vdc_firmware","vendor":"supermicro"},{"product":"x11ssn-e-wohs_firmware","vendor":"supermicro"},{"product":"x11ssn-e_firmware","vendor":"supermicro"},{"product":"x11ssn-h-001_firmware","vendor":"supermicro"},{"product":"x11ssn-h-vdc_firmware","vendor":"supermicro"},{"product":"x11ssn-h-wohs_firmware","vendor":"supermicro"},{"product":"x11ssn-h_firmware","vendor":"supermicro"},{"product":"x11ssn-l-001_firmware","vendor":"supermicro"},{"product":"x11ssn-l-vdc_firmware","vendor":"supermicro"},{"product":"x11ssn-l-wohs_firmware","vendor":"supermicro"},{"product":"x11ssn-l_firmware","vendor":"supermicro"},{"product":"x11ssq-l_firmware","vendor":"supermicro"},{"product":"x11ssq_firmware","vendor":"supermicro"},{"product":"x11ssv-lvds_firmware","vendor":"supermicro"},{"product":"x11ssv-m4_firmware","vendor":"supermicro"},{"product":"x11ssv-m4f_firmware","vendor":"supermicro"},{"product":"x11ssv-q_firmware","vendor":"supermicro"},{"product":"x11ssw-4tf_firmware","vendor":"supermicro"},{"product":"x11ssw-f_firmware","vendor":"supermicro"},{"product":"x11ssw-tf_firmware","vendor":"supermicro"},{"product":"x11ssz-f_firmware","vendor":"supermicro"},{"product":"x11ssz-qf_firmware","vendor":"supermicro"},{"product":"x11ssz-tln4f_firmware","vendor":"supermicro"},{"product":"x11swn-c-wohs_firmware","vendor":"supermicro"},{"product":"x11swn-c_firmware","vendor":"supermicro"},{"product":"x11swn-e-wohs_firmware","vendor":"supermicro"},{"product":"x11swn-e_firmware","vendor":"supermicro"},{"product":"x11swn-h-wohs_firmware","vendor":"supermicro"},{"product":"x11swn-h_firmware","vendor":"supermicro"},{"product":"x11swn-l-wohs_firmware","vendor":"supermicro"},{"product":"x11swn-l_firmware","vendor":"supermicro"},{"product":"x12dai-n6_firmware","vendor":"supermicro"},{"product":"x12ddw-a6_firmware","vendor":"supermicro"},{"product":"x12dgo-6_firmware","vendor":"supermicro"},{"product":"x12dgq-r_firmware","vendor":"supermicro"},{"product":"x12dgu_firmware","vendor":"supermicro"},{"product":"x12dhm-6_firmware","vendor":"supermicro"},{"product":"x12dpd-a6m25_firmware","vendor":"supermicro"},{"product":"x12dpfr-an6_firmware","vendor":"supermicro"},{"product":"x12dpg-ar_firmware","vendor":"supermicro"},{"product":"x12dpg-oa6-gd2_firmware","vendor":"supermicro"},{"product":"x12dpg-oa6_firmware","vendor":"supermicro"},{"product":"x12dpg-qbt6_firmware","vendor":"supermicro"},{"product":"x12dpg-qr_firmware","vendor":"supermicro"},{"product":"x12dpg-qt6_firmware","vendor":"supermicro"},{"product":"x12dpg-u6_firmware","vendor":"supermicro"},{"product":"x12dpi-n6_firmware","vendor":"supermicro"},{"product":"x12dpi-nt6_firmware","vendor":"supermicro"},{"product":"x12dpl-i6_firmware","vendor":"supermicro"},{"product":"x12dpl-nt6_firmware","vendor":"supermicro"},{"product":"x12dpt-b6_firmware","vendor":"supermicro"},{"product":"x12dpt-pt46_firmware","vendor":"supermicro"},{"product":"x12dpt-pt6_firmware","vendor":"supermicro"},{"product":"x12dpu-6_firmware","vendor":"supermicro"},{"product":"x12dsc-6_firmware","vendor":"supermicro"},{"product":"x12qch\\+_firmware","vendor":"supermicro"},{"product":"x12sae-5_firmware","vendor":"supermicro"},{"product":"x12sae_firmware","vendor":"supermicro"},{"product":"x12sca-5f_firmware","vendor":"supermicro"},{"product":"x12sca-f_firmware","vendor":"supermicro"},{"product":"x12scq_firmware","vendor":"supermicro"},{"product":"x12scv-lvds_firmware","vendor":"supermicro"},{"product":"x12scv-w_firmware","vendor":"supermicro"},{"product":"x12scz-f_firmware","vendor":"supermicro"},{"product":"x12scz-qf_firmware","vendor":"supermicro"},{"product":"x12scz-tln4f_firmware","vendor":"supermicro"},{"product":"x12sdv-10c-sp6f_firmware","vendor":"supermicro"},{"product":"x12sdv-10c-spt4f_firmware","vendor":"supermicro"},{"product":"x12sdv-14c-spt8f_firmware","vendor":"supermicro"},{"product":"x12sdv-16c-spt8f_firmware","vendor":"supermicro"},{"product":"x12sdv-20c-spt8f_firmware","vendor":"supermicro"},{"product":"x12sdv-4c-sp6f_firmware","vendor":"supermicro"},{"product":"x12sdv-4c-spt4f_firmware","vendor":"supermicro"},{"product":"x12sdv-4c-spt8f_firmware","vendor":"supermicro"},{"product":"x12sdv-8c-sp6f_firmware","vendor":"supermicro"},{"product":"x12sdv-8c-spt4f_firmware","vendor":"supermicro"},{"product":"x12sdv-8c-spt8f_firmware","vendor":"supermicro"},{"product":"x12sdv-8ce-sp4f_firmware","vendor":"supermicro"},{"product":"x12spa-tf_firmware","vendor":"supermicro"},{"product":"x12sped-f_firmware","vendor":"supermicro"},{"product":"x12spg-nf_firmware","vendor":"supermicro"},{"product":"x12spi-tf_firmware","vendor":"supermicro"},{"product":"x12spl-f_firmware","vendor":"supermicro"},{"product":"x12spl-ln4f_firmware","vendor":"supermicro"},{"product":"x12spm-ln4f_firmware","vendor":"supermicro"},{"product":"x12spm-ln6tf_firmware","vendor":"supermicro"},{"product":"x12spm-tf_firmware","vendor":"supermicro"},{"product":"x12spo-f_firmware","vendor":"supermicro"},{"product":"x12spo-ntf_firmware","vendor":"supermicro"},{"product":"x12spt-g_firmware","vendor":"supermicro"},{"product":"x12spt-gc_firmware","vendor":"supermicro"},{"product":"x12spt-pt_firmware","vendor":"supermicro"},{"product":"x12spw-f_firmware","vendor":"supermicro"},{"product":"x12spw-tf_firmware","vendor":"supermicro"},{"product":"x12spz-ln4f_firmware","vendor":"supermicro"},{"product":"x12spz-spln6f_firmware","vendor":"supermicro"},{"product":"x12std-f_firmware","vendor":"supermicro"},{"product":"x12ste-f_firmware","vendor":"supermicro"},{"product":"x12sth-f_firmware","vendor":"supermicro"},{"product":"x12sth-ln4f_firmware","vendor":"supermicro"},{"product":"x12sth-sys_firmware","vendor":"supermicro"},{"product":"x12stl-f_firmware","vendor":"supermicro"},{"product":"x12stl-if_firmware","vendor":"supermicro"},{"product":"x12stn-c-wohs_firmware","vendor":"supermicro"},{"product":"x12stn-c_firmware","vendor":"supermicro"},{"product":"x12stn-e-wohs_firmware","vendor":"supermicro"},{"product":"x12stn-e_firmware","vendor":"supermicro"},{"product":"x12stn-h-wohs_firmware","vendor":"supermicro"},{"product":"x12stn-h_firmware","vendor":"supermicro"},{"product":"x12stn-l-wohs_firmware","vendor":"supermicro"},{"product":"x12stn-l_firmware","vendor":"supermicro"},{"product":"x12stw-f_firmware","vendor":"supermicro"},{"product":"x12stw-tf_firmware","vendor":"supermicro"},{"product":"x13dai-t_firmware","vendor":"supermicro"},{"product":"x13ddw-a_firmware","vendor":"supermicro"},{"product":"x13deg-oa_firmware","vendor":"supermicro"},{"product":"x13deg-oad_firmware","vendor":"supermicro"},{"product":"x13deg-pvc_firmware","vendor":"supermicro"},{"product":"x13deg-qt_firmware","vendor":"supermicro"},{"product":"x13deh_firmware","vendor":"supermicro"},{"product":"x13dei-t_firmware","vendor":"supermicro"},{"product":"x13dei_firmware","vendor":"supermicro"},{"product":"x13dem_firmware","vendor":"supermicro"},{"product":"x13det-b_firmware","vendor":"supermicro"},{"product":"x13dgu_firmware","vendor":"supermicro"},{"product":"x13dsf-a_firmware","vendor":"supermicro"},{"product":"x13qeh\\+_firmware","vendor":"supermicro"},{"product":"x13sae-f_firmware","vendor":"supermicro"},{"product":"x13sae_firmware","vendor":"supermicro"},{"product":"x13san-c-wohs_firmware","vendor":"supermicro"},{"product":"x13san-c_firmware","vendor":"supermicro"},{"product":"x13san-e-wohs_firmware","vendor":"supermicro"},{"product":"x13san-e_firmware","vendor":"supermicro"},{"product":"x13san-h-wohs_firmware","vendor":"supermicro"},{"product":"x13san-h_firmware","vendor":"supermicro"},{"product":"x13san-l-wohs_firmware","vendor":"supermicro"},{"product":"x13san-l_firmware","vendor":"supermicro"},{"product":"x13saq_firmware","vendor":"supermicro"},{"product":"x13sav-lvds_firmware","vendor":"supermicro"},{"product":"x13sav-ps_firmware","vendor":"supermicro"},{"product":"x13saz-f_firmware","vendor":"supermicro"},{"product":"x13saz-q_firmware","vendor":"supermicro"},{"product":"x13sedw-f_firmware","vendor":"supermicro"},{"product":"x13seed-f_firmware","vendor":"supermicro"},{"product":"x13seed-sf_firmware","vendor":"supermicro"},{"product":"x13sefr-a_firmware","vendor":"supermicro"},{"product":"x13sei-f_firmware","vendor":"supermicro"},{"product":"x13sei-tf_firmware","vendor":"supermicro"},{"product":"x13sem-f_firmware","vendor":"supermicro"},{"product":"x13sem-tf_firmware","vendor":"supermicro"},{"product":"x13set-g_firmware","vendor":"supermicro"},{"product":"x13set-gc_firmware","vendor":"supermicro"},{"product":"x13sew-f_firmware","vendor":"supermicro"},{"product":"x13sew-tf_firmware","vendor":"supermicro"},{"product":"x13sra-tf_firmware","vendor":"supermicro"},{"product":"x13srn-e-wohs_firmware","vendor":"supermicro"},{"product":"x13srn-e_firmware","vendor":"supermicro"},{"product":"x13srn-h-wohs_firmware","vendor":"supermicro"},{"product":"x13srn-h_firmware","vendor":"supermicro"},{"product":"x13swa-tf_firmware","vendor":"supermicro"}],"cvss":{"score":8.8,"severity":"high","source":"nvd","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[],"description":"The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Command injection in n/a","id":"CVE-2023-33412","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"command_injection","year":"2023"},"n_packages":0,"n_references":1,"next":{"headline":"Command injection in n/a","id":"CVE-2023-33413"},"packages":[],"prev":{"headline":"Path traversal in n/a","id":"CVE-2023-33411"},"products":["n/a"],"published":"2023-12-07","related":[{"cvss_score":8.8,"headline":"Command injection in n/a","id":"CVE-2023-33413","kev_date_added":null,"published":"2023-12-07"},{"cvss_score":7.5,"headline":"Path traversal in n/a","id":"CVE-2023-33411","kev_date_added":null,"published":"2023-12-07"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-07-09","vendors":["n/a"]},"summary":"Remote authenticated attackers can execute arbitrary commands on Supermicro BMC devices via crafted requests to vulnerable CGI endpoints.","url":"https://insights.sbomify.com/CVE-2023-33412/"}