CVE-2023-35861: OS Command Injection
Published Jul 31, 2023
·Updated
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
Affected Software
331 affected components
Supermicro H12dst-b Firmware<03.10.35
Supermicro H12DST-B
Supermicro X13dai-t Firmware
Supermicro X13dai-t
Supermicro X13ddw-a Firmware
Supermicro X13ddw-a
Supermicro X13deg-oa Firmware
Supermicro X13deg-oa
Supermicro X13deg-oad Firmware
Supermicro X13deg-oad
Supermicro X13deg-pvc Firmware
Supermicro X13deg-pvc
Supermicro X13deg-qt Firmware
Supermicro X13deg-qt
Supermicro X13dei Firmware
Supermicro X13dei
Supermicro X13dei-t Firmware
Supermicro X13dei-t
Supermicro X13dem Firmware
Supermicro X13dem
Supermicro X13det-b Firmware
Supermicro X13det-b
Supermicro X13dgu Firmware
Supermicro X13dgu
Supermicro X13dsf-a Firmware
Supermicro X13dsf-a
Supermicro X13qeh\+ Firmware
Supermicro X13qeh\+
Supermicro X13sae Firmware
Supermicro X13sae
Supermicro X13sae-f Firmware
Supermicro X13sae-f
Supermicro X13san-c Firmware
Supermicro X13san-c
Supermicro X13san-c-wohs Firmware
Supermicro X13san-c-wohs
Supermicro X13san-e Firmware
Supermicro X13san-e
Supermicro X13san-e-wohs Firmware
Supermicro X13san-e-wohs
Supermicro X13san-h Firmware
Supermicro X13san-h
Supermicro X13san-h-wohs Firmware
Supermicro X13san-h-wohs
Supermicro X13san-l Firmware
Supermicro X13san-l
Supermicro X13san-l-wohs Firmware
Supermicro X13san-l-wohs
Supermicro X13saq Firmware
Supermicro X13saq
Supermicro X13sav-lvds Firmware
Supermicro X13sav-lvds
Supermicro X13sav-ps Firmware
Supermicro X13sav-ps
Supermicro X13saz-f Firmware
Supermicro X13saz-f
Supermicro X13saz-q Firmware
Supermicro X13saz-q
Supermicro X13sedw-f Firmware
Supermicro X13sedw-f
Supermicro X13seed-f Firmware
Supermicro X13seed-f
Supermicro X13seed-sf Firmware
Supermicro X13seed-sf
Supermicro X13sefr-a Firmware
Supermicro X13sefr-a
Supermicro X13sei-f Firmware
Supermicro X13sei-f
Supermicro X13sei-tf Firmware
Supermicro X13sei-tf
Supermicro X13sem-f Firmware
Supermicro X13sem-f
Supermicro X13sem-tf Firmware
Supermicro X13sem-tf
Supermicro X13set-g Firmware
Supermicro X13set-g
Supermicro X13set-gc Firmware
Supermicro X13set-gc
Supermicro X13sew-f Firmware
Supermicro X13sew-f
Supermicro X13sew-tf Firmware
Supermicro X13sew-tf
Supermicro X13sra-tf Firmware
Supermicro X13sra-tf
Supermicro X13srn-e Firmware
Supermicro X13srn-e
Supermicro X13srn-e-wohs Firmware
Supermicro X13srn-e-wohs
Supermicro X13srn-h Firmware
Supermicro X13srn-h
Supermicro X13srn-h-wohs Firmware
Supermicro X13srn-h-wohs
Supermicro X13swa-tf Firmware
Supermicro X13swa-tf
Supermicro H13dsg-o-cpu Firmware
Supermicro H13dsg-o-cpu
Supermicro H13dsg-o-cpu-d Firmware
Supermicro H13dsg-o-cpu-d
Supermicro H13dsh Firmware
Supermicro H13dsh
Supermicro H13sae-mf Firmware
Supermicro H13sae-mf
Supermicro H13srd-f Firmware
Supermicro H13srd-f
Supermicro H13ssf Firmware
Supermicro H13ssf
Supermicro H13ssh Firmware
Supermicro H13ssh
Supermicro H13ssl-n Firmware
Supermicro H13ssl-n
Supermicro H13ssl-nt Firmware
Supermicro H13ssl-nt
Supermicro H13sst-g Firmware
Supermicro H13sst-g
Supermicro H13sst-gc Firmware
Supermicro H13sst-gc
Supermicro H13ssw Firmware
Supermicro H13ssw
Supermicro X12dai-n6 Firmware
Supermicro X12dai-n6
Supermicro X12ddw-a6 Firmware
Supermicro X12ddw-a6
Supermicro X12dgo-6 Firmware
Supermicro X12dgo-6
Supermicro X12dgq-r Firmware
Supermicro X12dgq-r
Supermicro X12dgu Firmware
Supermicro X12dgu
Supermicro X12dhm-6 Firmware
Supermicro X12dhm-6
Supermicro X12dpd-a6m25 Firmware
Supermicro X12dpd-a6m25
Supermicro X12dpfr-an6 Firmware
Supermicro X12dpfr-an6
Supermicro X12dpg-ar Firmware
Supermicro X12dpg-ar
Supermicro X12dpg-oa6 Firmware
Supermicro X12dpg-oa6
Supermicro X12dpg-oa6-gd2 Firmware
Supermicro X12dpg-oa6-gd2
Supermicro X12dpg-qbt6 Firmware
Supermicro X12dpg-qbt6
Supermicro X12dpg-qr Firmware
Supermicro X12DPG-QR
Supermicro X12dpg-qt6 Firmware
Supermicro X12dpg-qt6
Supermicro X12dpg-u6 Firmware
Supermicro X12dpg-u6
Supermicro X12dpi-n6 Firmware
Supermicro X12dpi-n6
Supermicro X12dpi-nt6 Firmware
Supermicro X12dpi-nt6
Supermicro X12dpl-i6 Firmware
Supermicro X12dpl-i6
Supermicro X12dpl-nt6 Firmware
Supermicro X12dpl-nt6
Supermicro X12dpt-b6 Firmware
Supermicro X12dpt-b6
Supermicro X12dpt-pt46 Firmware
Supermicro X12dpt-pt46
Supermicro X12dpt-pt6 Firmware
Supermicro X12dpt-pt6
Supermicro X12dpu-6 Firmware
Supermicro X12dpu-6
Supermicro X12dsc-6 Firmware
Supermicro X12dsc-6
Supermicro X12qch\+ Firmware
Supermicro X12qch\+
Supermicro X12sae Firmware
Supermicro X12sae
Supermicro X12sae-5 Firmware
Supermicro X12sae-5
Supermicro X12sca-5f Firmware
Supermicro X12sca-5f
Supermicro X12sca-f Firmware
Supermicro X12sca-f
Supermicro X12scq Firmware
Supermicro X12scq
Supermicro X12scv-lvds Firmware
Supermicro X12scv-lvds
Supermicro X12scv-w Firmware
Supermicro X12scv-w
Supermicro X12scz-f Firmware
Supermicro X12scz-f
Supermicro X12scz-qf Firmware
Supermicro X12scz-qf
Supermicro X12scz-tln4f Firmware
Supermicro X12scz-tln4f
Supermicro X12sdv-10c-sp6f Firmware
Supermicro X12sdv-10c-sp6f
Supermicro X12sdv-10c-spt4f Firmware
Supermicro X12sdv-10c-spt4f
Supermicro X12sdv-14c-spt8f Firmware
Supermicro X12sdv-14c-spt8f
Supermicro X12sdv-16c-spt8f Firmware
Supermicro X12sdv-16c-spt8f
Supermicro X12sdv-20c-spt8f Firmware
Supermicro X12sdv-20c-spt8f
Supermicro X12sdv-4c-sp6f Firmware
Supermicro X12sdv-4c-sp6f
Supermicro X12sdv-4c-spt4f Firmware
Supermicro X12sdv-4c-spt4f
Supermicro X12sdv-4c-spt8f Firmware
Supermicro X12sdv-4c-spt8f
Supermicro X12sdv-8c-sp6f Firmware
Supermicro X12sdv-8c-sp6f
Supermicro X12sdv-8c-spt4f Firmware
Supermicro X12sdv-8c-spt4f
Supermicro X12sdv-8c-spt8f Firmware
Supermicro X12sdv-8c-spt8f
Supermicro X12sdv-8ce-sp4f Firmware
Supermicro X12sdv-8ce-sp4f
Supermicro X12spa-tf Firmware
Supermicro X12spa-tf
Supermicro X12sped-f Firmware
Supermicro X12sped-f
Supermicro X12spg-nf Firmware
Supermicro X12spg-nf
Supermicro X12spi-tf Firmware
Supermicro X12spi-tf
Supermicro X12spl-f Firmware
Supermicro X12spl-f
Supermicro X12spl-ln4f Firmware
Supermicro X12spl-ln4f
Supermicro X12spm-ln4f Firmware
Supermicro X12spm-ln4f
Supermicro X12spm-ln6tf Firmware
Supermicro X12spm-ln6tf
Supermicro X12spm-tf Firmware
Supermicro X12spm-tf
Supermicro X12spo-f Firmware
Supermicro X12spo-f
Supermicro X12spo-ntf Firmware
Supermicro X12spo-ntf
Supermicro X12spt-g Firmware
Supermicro X12spt-g
Supermicro X12spt-gc Firmware
Supermicro X12spt-gc
Supermicro X12spt-pt Firmware
Supermicro X12spt-pt
Supermicro X12spw-f Firmware
Supermicro X12spw-f
Supermicro X12spw-tf Firmware
Supermicro X12spw-tf
Supermicro X12spz-ln4f Firmware
Supermicro X12spz-ln4f
Supermicro X12spz-spln6f Firmware
Supermicro X12spz-spln6f
Supermicro X12std-f Firmware
Supermicro X12std-f
Supermicro X12ste-f Firmware
Supermicro X12ste-f
Supermicro X12sth-f Firmware
Supermicro X12sth-f
Supermicro X12sth-ln4f Firmware
Supermicro X12sth-ln4f
Supermicro X12sth-sys Firmware
Supermicro X12sth-sys
Supermicro X12stl-f Firmware
Supermicro X12stl-f
Supermicro X12stl-if Firmware
Supermicro X12stl-if
Supermicro X12stn-c Firmware
Supermicro X12stn-c
Supermicro X12stn-c-wohs Firmware
Supermicro X12stn-c-wohs
Supermicro X12stn-e Firmware
Supermicro X12stn-e
Supermicro X12stn-e-wohs Firmware
Supermicro X12stn-e-wohs
Supermicro X12stn-h Firmware
Supermicro X12stn-h
Supermicro X12stn-h-wohs Firmware
Supermicro X12stn-h-wohs
Supermicro X12stn-l Firmware
Supermicro X12stn-l
Supermicro X12stn-l-wohs Firmware
Supermicro X12stn-l-wohs
Supermicro X12stw-f Firmware
Supermicro X12stw-f
Supermicro X12stw-tf Firmware
Supermicro X12stw-tf
Supermicro H12ssw-ntr Firmware
Supermicro H12ssw-ntr
Supermicro H12ssw-ntl Firmware
Supermicro H12ssw-ntl
Supermicro H12ssw-nt Firmware
Supermicro H12ssw-nt
Supermicro H12ssw-inr Firmware
Supermicro H12ssw-inr
Supermicro H12ssw-inl Firmware
Supermicro H12ssw-inl
Supermicro H12ssw-in Firmware
Supermicro H12ssw-in
Supermicro H12ssw-an6 Firmware
Supermicro H12ssw-an6
Supermicro H12sst-ps Firmware
Supermicro H12sst-ps
Supermicro H12ssl-nt Firmware
Supermicro H12ssl-nt
Supermicro H12ssl-i Firmware
Supermicro H12ssl-i
Supermicro H12ssl-ct Firmware
Supermicro H12ssl-ct
Supermicro H12ssl-c Firmware
Supermicro H12ssl-c
Supermicro H12ssg-anp6 Firmware
Supermicro H12ssg-anp6
Supermicro H12ssg-an6 Firmware
Supermicro H12ssg-an6
Supermicro H12ssfr-an6 Firmware
Supermicro H12ssfr-an6
Supermicro H12ssff-an6 Firmware
Supermicro H12ssff-an6
Supermicro H12dsu-inr Firmware
Supermicro H12dsu-inr
Supermicro H12dsu-in Firmware
Supermicro H12dsu-in
Supermicro H12dst-b Firmware
Supermicro H12dsi-nt6 Firmware
Supermicro H12dsi-nt6
Supermicro H12dsi-n6 Firmware
Supermicro H12dsi-n6
Supermicro H12dsg-q-cpu6 Firmware
Supermicro H12dsg-q-cpu6
Supermicro H12dsg-o-cpu Firmware
Supermicro H12dsg-o-cpu
Supermicro H12dgq-nt6 Firmware
Supermicro H12dgq-nt6
Supermicro H12dgo-6 Firmware
Supermicro H12dgo-6
Event History
Jul 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
01:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-35861?
CVE-2023-35861 is considered a critical vulnerability as it allows remote attackers to execute arbitrary commands as root on affected Supermicro motherboards.
2
What systems are affected by CVE-2023-35861?
CVE-2023-35861 affects Supermicro motherboards, specifically H12DST-B versions before 03.10.35.
3
How can I fix CVE-2023-35861?
To fix CVE-2023-35861, users are advised to update their Supermicro firmware to version 03.10.35 or later.
4
What type of vulnerability is CVE-2023-35861?
CVE-2023-35861 is a shell-injection vulnerability that can be exploited through email notifications.
5
Can CVE-2023-35861 be exploited remotely?
Yes, CVE-2023-35861 can be exploited remotely, allowing attackers to gain unauthorized root access.