Supermicro h11dsi Firmware vulnerabilities

2 CVEs affecting Supermicro h11dsi Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-34853, published 2023-08-22.

More from Supermicro.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-34853, published 2023-08-22. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.
• CVE-2022-43309, published 2023-04-07. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.