CVE-2023-35861
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST...
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
- Record
CVE-2023-35861- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List No score
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
- Record
CVE-2023-35861- Updated
- 2026-11-02
EUVDEUVD-2023-39854 No score
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
- Record
EUVD-2023-39854- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qg5r-gm88-j987
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST...
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
- Record
GHSA-qg5r-gm88-j987- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
- supermicro h12dst-b
- supermicro h12dgo-6 firmware
- supermicro h12dgq-nt6 firmware
- supermicro h12dsg-o-cpu firmware
- supermicro h12dsg-q-cpu6 firmware
- supermicro h12dsi-n6 firmware
- supermicro h12dsi-nt6 firmware
- supermicro h12dst-b firmware
- supermicro h12dsu-in firmware
- supermicro h12dsu-inr firmware
- supermicro h12ssff-an6 firmware
- supermicro h12ssfr-an6 firmware
Show 154 moreShow less
- supermicro h12ssg-an6 firmware
- supermicro h12ssg-anp6 firmware
- supermicro h12ssl-c firmware
- supermicro h12ssl-ct firmware
- supermicro h12ssl-i firmware
- supermicro h12ssl-nt firmware
- supermicro h12sst-ps firmware
- supermicro h12ssw-an6 firmware
- supermicro h12ssw-in firmware
- supermicro h12ssw-inl firmware
- supermicro h12ssw-inr firmware
- supermicro h12ssw-nt firmware
- supermicro h12ssw-ntl firmware
- supermicro h12ssw-ntr firmware
- supermicro h13dsg-o-cpu-d firmware
- supermicro h13dsg-o-cpu firmware
- supermicro h13dsh firmware
- supermicro h13sae-mf firmware
- supermicro h13srd-f firmware
- supermicro h13ssf firmware
- supermicro h13ssh firmware
- supermicro h13ssl-n firmware
- supermicro h13ssl-nt firmware
- supermicro h13sst-g firmware
- supermicro h13sst-gc firmware
- supermicro h13ssw firmware
- supermicro x12dai-n6 firmware
- supermicro x12ddw-a6 firmware
- supermicro x12dgo-6 firmware
- supermicro x12dgq-r firmware
- supermicro x12dgu firmware
- supermicro x12dhm-6 firmware
- supermicro x12dpd-a6m25 firmware
- supermicro x12dpfr-an6 firmware
- supermicro x12dpg-ar firmware
- supermicro x12dpg-oa6-gd2 firmware
- supermicro x12dpg-oa6 firmware
- supermicro x12dpg-qbt6 firmware
- supermicro x12dpg-qr firmware
- supermicro x12dpg-qt6 firmware
- supermicro x12dpg-u6 firmware
- supermicro x12dpi-n6 firmware
- supermicro x12dpi-nt6 firmware
- supermicro x12dpl-i6 firmware
- supermicro x12dpl-nt6 firmware
- supermicro x12dpt-b6 firmware
- supermicro x12dpt-pt46 firmware
- supermicro x12dpt-pt6 firmware
- supermicro x12dpu-6 firmware
- supermicro x12dsc-6 firmware
- supermicro x12qch\+ firmware
- supermicro x12sae-5 firmware
- supermicro x12sae firmware
- supermicro x12sca-5f firmware
- supermicro x12sca-f firmware
- supermicro x12scq firmware
- supermicro x12scv-lvds firmware
- supermicro x12scv-w firmware
- supermicro x12scz-f firmware
- supermicro x12scz-qf firmware
- supermicro x12scz-tln4f firmware
- supermicro x12sdv-10c-sp6f firmware
- supermicro x12sdv-10c-spt4f firmware
- supermicro x12sdv-14c-spt8f firmware
- supermicro x12sdv-16c-spt8f firmware
- supermicro x12sdv-20c-spt8f firmware
- supermicro x12sdv-4c-sp6f firmware
- supermicro x12sdv-4c-spt4f firmware
- supermicro x12sdv-4c-spt8f firmware
- supermicro x12sdv-8c-sp6f firmware
- supermicro x12sdv-8c-spt4f firmware
- supermicro x12sdv-8c-spt8f firmware
- supermicro x12sdv-8ce-sp4f firmware
- supermicro x12spa-tf firmware
- supermicro x12sped-f firmware
- supermicro x12spg-nf firmware
- supermicro x12spi-tf firmware
- supermicro x12spl-f firmware
- supermicro x12spl-ln4f firmware
- supermicro x12spm-ln4f firmware
- supermicro x12spm-ln6tf firmware
- supermicro x12spm-tf firmware
- supermicro x12spo-f firmware
- supermicro x12spo-ntf firmware
- supermicro x12spt-g firmware
- supermicro x12spt-gc firmware
- supermicro x12spt-pt firmware
- supermicro x12spw-f firmware
- supermicro x12spw-tf firmware
- supermicro x12spz-ln4f firmware
- supermicro x12spz-spln6f firmware
- supermicro x12std-f firmware
- supermicro x12ste-f firmware
- supermicro x12sth-f firmware
- supermicro x12sth-ln4f firmware
- supermicro x12sth-sys firmware
- supermicro x12stl-f firmware
- supermicro x12stl-if firmware
- supermicro x12stn-c-wohs firmware
- supermicro x12stn-c firmware
- supermicro x12stn-e-wohs firmware
- supermicro x12stn-e firmware
- supermicro x12stn-h-wohs firmware
- supermicro x12stn-h firmware
- supermicro x12stn-l-wohs firmware
- supermicro x12stn-l firmware
- supermicro x12stw-f firmware
- supermicro x12stw-tf firmware
- supermicro x13dai-t firmware
- supermicro x13ddw-a firmware
- supermicro x13deg-oa firmware
- supermicro x13deg-oad firmware
- supermicro x13deg-pvc firmware
- supermicro x13deg-qt firmware
- supermicro x13dei-t firmware
- supermicro x13dei firmware
- supermicro x13dem firmware
- supermicro x13det-b firmware
- supermicro x13dgu firmware
- supermicro x13dsf-a firmware
- supermicro x13qeh\+ firmware
- supermicro x13sae-f firmware
- supermicro x13sae firmware
- supermicro x13san-c-wohs firmware
- supermicro x13san-c firmware
- supermicro x13san-e-wohs firmware
- supermicro x13san-e firmware
- supermicro x13san-h-wohs firmware
- supermicro x13san-h firmware
- supermicro x13san-l-wohs firmware
- supermicro x13san-l firmware
- supermicro x13saq firmware
- supermicro x13sav-lvds firmware
- supermicro x13sav-ps firmware
- supermicro x13saz-f firmware
- supermicro x13saz-q firmware
- supermicro x13sedw-f firmware
- supermicro x13seed-f firmware
- supermicro x13seed-sf firmware
- supermicro x13sefr-a firmware
- supermicro x13sei-f firmware
- supermicro x13sei-tf firmware
- supermicro x13sem-f firmware
- supermicro x13sem-tf firmware
- supermicro x13set-g firmware
- supermicro x13set-gc firmware
- supermicro x13sew-f firmware
- supermicro x13sew-tf firmware
- supermicro x13sra-tf firmware
- supermicro x13srn-e-wohs firmware
- supermicro x13srn-e firmware
- supermicro x13srn-h-wohs firmware
- supermicro x13srn-h firmware
- supermicro x13swa-tf firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-35861 is a critical vulnerability (CVSS 9.8) in Supermicro H12dst-b, published July 31, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 81st percentile. No source names a fixed version.