CVE-2023-40285

Name of the Vulnerable Software and Affected Versions Supermicro X11SSM-F version 1.66 Supermicro X11SAE-F version 1.66 Supermicro X11SSE-F version 1.66

Description An issue exists in the web interface of Supermicro X11 series BMC IPMI servers due to inadequate protection of the web page structure. This issue can be exploited by an attacker to execute arbitrary code. The issue is related to a cross-site scripting (XSS) problem.

Recommendations For Supermicro X11SSM-F version 1.66, update the firmware to a version that addresses the XSS issue. For Supermicro X11SAE-F version 1.66, update the firmware to a version that addresses the XSS issue. For Supermicro X11SSE-F version 1.66, update the firmware to a version that addresses the XSS issue. As a temporary workaround, consider restricting access to the web interface of the affected devices until a patch is available.