Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Freax13

#25773of 56,329
9.8Total CVSS
Vulnerabilities · 1
PT-2023-25350
9.8
2023-07-31
Supermicro · Supermicro Motherboards · CVE-2023-35861
**Name of the Vulnerable Software and Affected Versions** Supermicro motherboards versions prior to 03.10.35 **Description** A shell-injection vulnerability in email notifications on Supermicro motherboards allows remote attackers to inject and execute arbitrary commands as root on the BMC. **Recommendations** For versions prior to 03.10.35, update to version 03.10.35 or later to resolve the issue. As a temporary workaround, consider disabling email notifications on the BMC until a patch is available. Restrict access to the BMC to minimize the risk of exploitation.