CVE-2023-33411: Supermicro b12dpe-6 Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.

Affected products

  • Supermicro b12dpe-6 Firmware: up to and including 3.17.02
  • Supermicro b12dpt-6 Firmware: up to and including 3.17.02
  • Supermicro b12spe-CPU-25g Firmware: up to and including 3.17.02
  • Supermicro b13dee Firmware: up to and including 3.17.02
  • Supermicro b13det Firmware: up to and including 3.17.02
  • Supermicro b13see-CPU-25g Firmware: up to and including 3.17.02
  • Supermicro b13seg Firmware: up to and including 3.17.02
  • Supermicro c9x299-PG300 Firmware: up to and including 3.17.02
  • Supermicro c9x299-PG300F Firmware: up to and including 3.17.02
  • Supermicro c9x299-Pg Firmware: up to and including 3.17.02
  • Supermicro c9x299-Pgf-L Firmware: up to and including 3.17.02
  • Supermicro c9x299-Pgf Firmware: up to and including 3.17.02
  • Supermicro c9x299-Rpgf-L Firmware: up to and including 3.17.02
  • Supermicro c9x299-Rpgf Firmware: up to and including 3.17.02
  • Supermicro h12dgo-6 Firmware: up to and including 3.17.02
  • Supermicro h12dgq-NT6 Firmware: up to and including 3.17.02
  • Supermicro h12dsg-O-CPU Firmware: up to and including 3.17.02
  • Supermicro h12dsg-Q-CPU6 Firmware: up to and including 3.17.02
  • Supermicro h12dsi-n6 Firmware: up to and including 3.17.02
  • Supermicro h12dsi-NT6 Firmware: up to and including 3.17.02
  • Supermicro h12dst-B Firmware: up to and including 3.17.02
  • Supermicro h12dsu-In Firmware: up to and including 3.17.02
  • Supermicro h12dsu-Inr Firmware: up to and including 3.17.02
  • Supermicro h12ssff-AN6 Firmware: up to and including 3.17.02
  • Supermicro h12ssfr-AN6 Firmware: up to and including 3.17.02
  • and 337 more

Published 2023-12-07. Last modified 2026-07-09.