VulnerabilityModified
CVE-2022-43309
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.
MEDIUM 5.5EPSS 0.15%
Does this matter?
Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.
Description
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.15% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-732
- Affected
- supermicro/x11ssl-cf firmware · supermicro/x11dac firmware · supermicro/x11dai-n firmware · supermicro/x11ddw-l firmware · supermicro/x11ddw-nt firmware · supermicro/x11dgo-t firmware · supermicro/x11dgq firmware · supermicro/x11dpff-sn firmware · supermicro/x11dpfr-s firmware · supermicro/x11dpfr-sn firmware · supermicro/x11dpg-ot-cpu firmware · supermicro/x11dpg-qt firmware · supermicro/x11dpg-sn firmware · supermicro/x11dph-i firmware · supermicro/x11dph-t firmware · supermicro/x11dph-tq firmware · supermicro/x11dpi-n firmware · supermicro/x11dpi-nt firmware · supermicro/x11dpl-i firmware · supermicro/x11dps-re firmware · +40 more
- Source
- cve@mitre.org
References
- https://www.supermicro.com/en/support/security_VRM_Jan_2023Vendor Advisory
- https://www.supermicro.com/en/support/security_VRM_Jan_2023Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.