{"id":"CVE-2022-43309","aliases":["EUVD-2022-46349","GHSA-x3g3-cjwm-fv45"],"status":"published","title":"Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.","description":"Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00151,"percentile":0.04325,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2023-04-07T00:00:00Z","modified":"2026-07-09T01:17:51Z","products":[{"vendor":"supermicro","product":"h11dsi-nt_firmware"},{"vendor":"supermicro","product":"h11dsi_firmware"},{"vendor":"supermicro","product":"h11dst-b_firmware"},{"vendor":"supermicro","product":"h11dsu-in_firmware"},{"vendor":"supermicro","product":"h12dgo-6_firmware"},{"vendor":"supermicro","product":"h12dsg-o-cpu_firmware"},{"vendor":"supermicro","product":"h12dsi-n6_firmware"},{"vendor":"supermicro","product":"h12dsi-nt6_firmware"},{"vendor":"supermicro","product":"h12dst-b_firmware"},{"vendor":"supermicro","product":"h12dsu-in_firmware"},{"vendor":"supermicro","product":"h12dsu-inr_firmware"},{"vendor":"supermicro","product":"h12ssff-an6_firmware"},{"vendor":"supermicro","product":"h12ssg-anp6_firmware"},{"vendor":"supermicro","product":"h12ssl-c_firmware"},{"vendor":"supermicro","product":"h12ssl-ct_firmware"},{"vendor":"supermicro","product":"h12ssl-i_firmware"},{"vendor":"supermicro","product":"h12ssl-nt_firmware"},{"vendor":"supermicro","product":"h12sst-ps_firmware"},{"vendor":"supermicro","product":"h12ssw-in_firmware"},{"vendor":"supermicro","product":"h12ssw-inl_firmware"},{"vendor":"supermicro","product":"h12ssw-inr_firmware"},{"vendor":"supermicro","product":"h12ssw-nt_firmware"},{"vendor":"supermicro","product":"h12ssw-ntl_firmware"},{"vendor":"supermicro","product":"h12ssw-ntr_firmware"},{"vendor":"supermicro","product":"x11dac_firmware"},{"vendor":"supermicro","product":"x11dai-n_firmware"},{"vendor":"supermicro","product":"x11ddw-l_firmware"},{"vendor":"supermicro","product":"x11ddw-nt_firmware"},{"vendor":"supermicro","product":"x11dgo-t_firmware"},{"vendor":"supermicro","product":"x11dgq_firmware"},{"vendor":"supermicro","product":"x11dpff-sn_firmware"},{"vendor":"supermicro","product":"x11dpfr-s_firmware"},{"vendor":"supermicro","product":"x11dpfr-sn_firmware"},{"vendor":"supermicro","product":"x11dpg-ot-cpu_firmware"},{"vendor":"supermicro","product":"x11dpg-qt_firmware"},{"vendor":"supermicro","product":"x11dpg-sn_firmware"},{"vendor":"supermicro","product":"x11dph-i_firmware"},{"vendor":"supermicro","product":"x11dph-t_firmware"},{"vendor":"supermicro","product":"x11dph-tq_firmware"},{"vendor":"supermicro","product":"x11dpi-n_firmware"},{"vendor":"supermicro","product":"x11dpi-nt_firmware"},{"vendor":"supermicro","product":"x11dpl-i_firmware"},{"vendor":"supermicro","product":"x11dps-re_firmware"},{"vendor":"supermicro","product":"x11dpt-b_firmware"},{"vendor":"supermicro","product":"x11dpt-bh_firmware"},{"vendor":"supermicro","product":"x11dpt-l_firmware"},{"vendor":"supermicro","product":"x11dpt-ps_firmware"},{"vendor":"supermicro","product":"x11dpu-v_firmware"},{"vendor":"supermicro","product":"x11dpu-x_firmware"},{"vendor":"supermicro","product":"x11dpu-xll_firmware"},{"vendor":"supermicro","product":"x11dpu-z\\+_firmware"},{"vendor":"supermicro","product":"x11dpu-ze\\+_firmware"},{"vendor":"supermicro","product":"x11dpu_firmware"},{"vendor":"supermicro","product":"x11dpx-t_firmware"},{"vendor":"supermicro","product":"x11dsc\\+_firmware"},{"vendor":"supermicro","product":"x11dsf-e_firmware"},{"vendor":"supermicro","product":"x11dsn-ts_firmware"},{"vendor":"supermicro","product":"x11dsn-tsq_firmware"},{"vendor":"supermicro","product":"x11opi-cpu_firmware"},{"vendor":"supermicro","product":"x11qph\\+_firmware"},{"vendor":"supermicro","product":"x11sae_firmware"},{"vendor":"supermicro","product":"x11sae_m_firmware"},{"vendor":"supermicro","product":"x11sat_firmware"},{"vendor":"supermicro","product":"x11sba_firmware"},{"vendor":"supermicro","product":"x11sca-f_firmware"},{"vendor":"supermicro","product":"x11sca-w_firmware"},{"vendor":"supermicro","product":"x11sca_firmware"},{"vendor":"supermicro","product":"x11scd-f_firmware"},{"vendor":"supermicro","product":"x11sch-f_firmware"},{"vendor":"supermicro","product":"x11sch-ln4f_firmware"},{"vendor":"supermicro","product":"x11scl-f_firmware"},{"vendor":"supermicro","product":"x11scl-if_firmware"},{"vendor":"supermicro","product":"x11scl-ln4f_firmware"},{"vendor":"supermicro","product":"x11scm-f_firmware"},{"vendor":"supermicro","product":"x11scm-ln8f_firmware"},{"vendor":"supermicro","product":"x11scw-f_firmware"},{"vendor":"supermicro","product":"x11sdd-18c-f_firmware"},{"vendor":"supermicro","product":"x11sdd-8c-f_firmware"},{"vendor":"supermicro","product":"x11sds-12c_firmware"},{"vendor":"supermicro","product":"x11sds-16c_firmware"},{"vendor":"supermicro","product":"x11sds-8c_firmware"},{"vendor":"supermicro","product":"x11spa-t_firmware"},{"vendor":"supermicro","product":"x11spa-tf_firmware"},{"vendor":"supermicro","product":"x11spg-tf_firmware"},{"vendor":"supermicro","product":"x11sph-nctf_firmware"},{"vendor":"supermicro","product":"x11sph-nctpf_firmware"},{"vendor":"supermicro","product":"x11spi-tf_firmware"},{"vendor":"supermicro","product":"x11spl-f_firmware"},{"vendor":"supermicro","product":"x11spm-f_firmware"},{"vendor":"supermicro","product":"x11spm-tf_firmware"},{"vendor":"supermicro","product":"x11spm-tpf_firmware"},{"vendor":"supermicro","product":"x11spw-ctf_firmware"},{"vendor":"supermicro","product":"x11spw-tf_firmware"},{"vendor":"supermicro","product":"x11sra_firmware"},{"vendor":"supermicro","product":"x11sri-if_firmware"},{"vendor":"supermicro","product":"x11srl-f_firmware"},{"vendor":"supermicro","product":"x11srm-f_firmware"},{"vendor":"supermicro","product":"x11srm-vf_firmware"},{"vendor":"supermicro","product":"x11srm_firmware"},{"vendor":"supermicro","product":"x11ssd-f_firmware"},{"vendor":"supermicro","product":"x11sse-f_firmware"},{"vendor":"supermicro","product":"x11ssh-ctf_firmware"},{"vendor":"supermicro","product":"x11ssh-f_firmware"},{"vendor":"supermicro","product":"x11ssh-gf-1585_firmware"},{"vendor":"supermicro","product":"x11ssh-gf-1585l_firmware"},{"vendor":"supermicro","product":"x11ssh-gtf-1585_firmware"},{"vendor":"supermicro","product":"x11ssh-gtf-1585l_firmware"},{"vendor":"supermicro","product":"x11ssh-ln4f_firmware"},{"vendor":"supermicro","product":"x11ssh-tf_firmware"},{"vendor":"supermicro","product":"x11ssi-ln4f_firmware"},{"vendor":"supermicro","product":"x11ssl-cf_firmware"},{"vendor":"supermicro","product":"x11ssl-f_firmware"},{"vendor":"supermicro","product":"x11ssl-nf_firmware"},{"vendor":"supermicro","product":"x11ssl_firmware"},{"vendor":"supermicro","product":"x11ssm-f_firmware"},{"vendor":"supermicro","product":"x11ssm_firmware"},{"vendor":"supermicro","product":"x11ssn_firmware"},{"vendor":"supermicro","product":"x11ssq_firmware"},{"vendor":"supermicro","product":"x11ssql_firmware"},{"vendor":"supermicro","product":"x11ssv-lvds_firmware"},{"vendor":"supermicro","product":"x11ssv-q_firmware"},{"vendor":"supermicro","product":"x11ssw-4tf_firmware"},{"vendor":"supermicro","product":"x11ssw-f_firmware"},{"vendor":"supermicro","product":"x11ssw-tf_firmware"},{"vendor":"supermicro","product":"x11ssz-f_firmware"},{"vendor":"supermicro","product":"x11ssz-tln4f_firmware"},{"vendor":"supermicro","product":"x12dai-n6_firmware"},{"vendor":"supermicro","product":"x12ddw-a6_firmware"},{"vendor":"supermicro","product":"x12dpg-qt6_firmware"},{"vendor":"supermicro","product":"x12dpi-n6_firmware"},{"vendor":"supermicro","product":"x12dpi-nt6_firmware"},{"vendor":"supermicro","product":"x12dpl-i6_firmware"},{"vendor":"supermicro","product":"x12dpl-nt6_firmware"},{"vendor":"supermicro","product":"x12spa-tf_firmware"},{"vendor":"supermicro","product":"x12spi-tf_firmware"},{"vendor":"supermicro","product":"x12spl-f_firmware"},{"vendor":"supermicro","product":"x12spl-ln4f_firmware"},{"vendor":"supermicro","product":"x12spm-ln4f_firmware"},{"vendor":"supermicro","product":"x12spm-ln6tf_firmware"},{"vendor":"supermicro","product":"x12spm-tf_firmware"},{"vendor":"supermicro","product":"x12spo-f_firmware"},{"vendor":"supermicro","product":"x12spo-ntf_firmware"},{"vendor":"supermicro","product":"x12spw-f_firmware"},{"vendor":"supermicro","product":"x12spw-tf_firmware"},{"vendor":"supermicro","product":"x12spz-ln4f_firmware"},{"vendor":"supermicro","product":"x12spz-spln6f_firmware"}],"references":[{"url":"https://www.supermicro.com/en/support/security_VRM_Jan_2023","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43309"},{"url":"http://supermicro.com"},{"url":"http://x11ssl-cf.com"},{"url":"https://github.com/advisories/GHSA-x3g3-cjwm-fv45"}],"sources":{"cve":[{"id":"CVE-2022-43309","description":"Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.","status":"published","published":"2023-04-07T00:00:00Z","modified":"2026-07-09T00:22:13.83Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:34:25.308772Z"}],"euvd":[{"id":"EUVD-2022-46349","description":"Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.","status":"published","published":"2023-04-07T00:00:00Z","modified":"2026-07-09T00:22:13Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:07.281662Z"}],"ghsa":[{"id":"GHSA-x3g3-cjwm-fv45","title":"Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.","description":"Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.","status":"published","published":"2023-04-07T21:30:15Z","modified":"2024-04-11T21:02:48Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:57:06.434267Z"}],"nvd":[{"id":"CVE-2022-43309","description":"Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.","status":"published","published":"2023-04-07T21:15:06.827Z","modified":"2026-07-09T01:17:51.31Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:07:37.020555Z"}]}}