Supermicro X11 Devices Vulnerable to XSS Attack
CVE-2023-40288

8.3HIGH

Key Information:

Vendor

Supermicro

Status
X11ssm-f Firmware
Vendor
CVE Published:
27 March 2024

What is CVE-2023-40288?

A vulnerability affecting Supermicro X11SSM-F, X11SAE-F, and X11SSE-F version 1.66 has been identified that allows for cross-site scripting (XSS) attacks. This weakness enables attackers to execute malicious scripts in the context of the user's session, potentially compromising sensitive data and system integrity. Implementing security measures and regularly updating to the latest firmware is essential to mitigate the risks associated with this vulnerability. For more detailed information, visit the official Supermicro security advisories.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.supermicro.com/en/support/security_center#%21...
https://www.supermicro.com/en/support/security_BMC_IPMI_O...

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.