CVE-2023-33412

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management...

8.8 High

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.15%Up 1.1 points since Dec 8, 2023

What each source reports

NVD Score used 8.8

Record: CVE-2023-33412
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

CVE List No score

Record: CVE-2023-33412
Updated: 2026-11-02

EUVDEUVD-2023-37575 No score

Record: EUVD-2023-37575
Updated: 2026-11-02

GitHub AdvisoriesGHSA-283r-fx38-xwrx 8.8

The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management...

Record: GHSA-283r-fx38-xwrx
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

Show 350 moreShow less

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-33412 is a high vulnerability (CVSS 8.8) in Supermicro B12dpe-6 Firmware, published December 7, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 67th percentile. No source names a fixed version.