Multiple stack-based buffer overflows in cgi/closewindow.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMTX9315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1) sesssid or (2) ACT parameter.
Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMTX9315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter.