{"id":"CVE-2023-35861","aliases":["EUVD-2023-39854","GHSA-qg5r-gm88-j987"],"status":"published","title":"A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST...","description":"A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02108,"percentile":0.82005,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2023-07-31T00:00:00Z","modified":"2026-06-17T06:05:21Z","products":[{"vendor":"supermicro","product":"h12dgo-6_firmware"},{"vendor":"supermicro","product":"h12dgq-nt6_firmware"},{"vendor":"supermicro","product":"h12dsg-o-cpu_firmware"},{"vendor":"supermicro","product":"h12dsg-q-cpu6_firmware"},{"vendor":"supermicro","product":"h12dsi-n6_firmware"},{"vendor":"supermicro","product":"h12dsi-nt6_firmware"},{"vendor":"supermicro","product":"h12dst-b"},{"vendor":"supermicro","product":"h12dst-b_firmware"},{"vendor":"supermicro","product":"h12dsu-in_firmware"},{"vendor":"supermicro","product":"h12dsu-inr_firmware"},{"vendor":"supermicro","product":"h12ssff-an6_firmware"},{"vendor":"supermicro","product":"h12ssfr-an6_firmware"},{"vendor":"supermicro","product":"h12ssg-an6_firmware"},{"vendor":"supermicro","product":"h12ssg-anp6_firmware"},{"vendor":"supermicro","product":"h12ssl-c_firmware"},{"vendor":"supermicro","product":"h12ssl-ct_firmware"},{"vendor":"supermicro","product":"h12ssl-i_firmware"},{"vendor":"supermicro","product":"h12ssl-nt_firmware"},{"vendor":"supermicro","product":"h12sst-ps_firmware"},{"vendor":"supermicro","product":"h12ssw-an6_firmware"},{"vendor":"supermicro","product":"h12ssw-in_firmware"},{"vendor":"supermicro","product":"h12ssw-inl_firmware"},{"vendor":"supermicro","product":"h12ssw-inr_firmware"},{"vendor":"supermicro","product":"h12ssw-nt_firmware"},{"vendor":"supermicro","product":"h12ssw-ntl_firmware"},{"vendor":"supermicro","product":"h12ssw-ntr_firmware"},{"vendor":"supermicro","product":"h13dsg-o-cpu-d_firmware"},{"vendor":"supermicro","product":"h13dsg-o-cpu_firmware"},{"vendor":"supermicro","product":"h13dsh_firmware"},{"vendor":"supermicro","product":"h13sae-mf_firmware"},{"vendor":"supermicro","product":"h13srd-f_firmware"},{"vendor":"supermicro","product":"h13ssf_firmware"},{"vendor":"supermicro","product":"h13ssh_firmware"},{"vendor":"supermicro","product":"h13ssl-n_firmware"},{"vendor":"supermicro","product":"h13ssl-nt_firmware"},{"vendor":"supermicro","product":"h13sst-g_firmware"},{"vendor":"supermicro","product":"h13sst-gc_firmware"},{"vendor":"supermicro","product":"h13ssw_firmware"},{"vendor":"supermicro","product":"x12dai-n6_firmware"},{"vendor":"supermicro","product":"x12ddw-a6_firmware"},{"vendor":"supermicro","product":"x12dgo-6_firmware"},{"vendor":"supermicro","product":"x12dgq-r_firmware"},{"vendor":"supermicro","product":"x12dgu_firmware"},{"vendor":"supermicro","product":"x12dhm-6_firmware"},{"vendor":"supermicro","product":"x12dpd-a6m25_firmware"},{"vendor":"supermicro","product":"x12dpfr-an6_firmware"},{"vendor":"supermicro","product":"x12dpg-ar_firmware"},{"vendor":"supermicro","product":"x12dpg-oa6-gd2_firmware"},{"vendor":"supermicro","product":"x12dpg-oa6_firmware"},{"vendor":"supermicro","product":"x12dpg-qbt6_firmware"},{"vendor":"supermicro","product":"x12dpg-qr_firmware"},{"vendor":"supermicro","product":"x12dpg-qt6_firmware"},{"vendor":"supermicro","product":"x12dpg-u6_firmware"},{"vendor":"supermicro","product":"x12dpi-n6_firmware"},{"vendor":"supermicro","product":"x12dpi-nt6_firmware"},{"vendor":"supermicro","product":"x12dpl-i6_firmware"},{"vendor":"supermicro","product":"x12dpl-nt6_firmware"},{"vendor":"supermicro","product":"x12dpt-b6_firmware"},{"vendor":"supermicro","product":"x12dpt-pt46_firmware"},{"vendor":"supermicro","product":"x12dpt-pt6_firmware"},{"vendor":"supermicro","product":"x12dpu-6_firmware"},{"vendor":"supermicro","product":"x12dsc-6_firmware"},{"vendor":"supermicro","product":"x12qch\\+_firmware"},{"vendor":"supermicro","product":"x12sae-5_firmware"},{"vendor":"supermicro","product":"x12sae_firmware"},{"vendor":"supermicro","product":"x12sca-5f_firmware"},{"vendor":"supermicro","product":"x12sca-f_firmware"},{"vendor":"supermicro","product":"x12scq_firmware"},{"vendor":"supermicro","product":"x12scv-lvds_firmware"},{"vendor":"supermicro","product":"x12scv-w_firmware"},{"vendor":"supermicro","product":"x12scz-f_firmware"},{"vendor":"supermicro","product":"x12scz-qf_firmware"},{"vendor":"supermicro","product":"x12scz-tln4f_firmware"},{"vendor":"supermicro","product":"x12sdv-10c-sp6f_firmware"},{"vendor":"supermicro","product":"x12sdv-10c-spt4f_firmware"},{"vendor":"supermicro","product":"x12sdv-14c-spt8f_firmware"},{"vendor":"supermicro","product":"x12sdv-16c-spt8f_firmware"},{"vendor":"supermicro","product":"x12sdv-20c-spt8f_firmware"},{"vendor":"supermicro","product":"x12sdv-4c-sp6f_firmware"},{"vendor":"supermicro","product":"x12sdv-4c-spt4f_firmware"},{"vendor":"supermicro","product":"x12sdv-4c-spt8f_firmware"},{"vendor":"supermicro","product":"x12sdv-8c-sp6f_firmware"},{"vendor":"supermicro","product":"x12sdv-8c-spt4f_firmware"},{"vendor":"supermicro","product":"x12sdv-8c-spt8f_firmware"},{"vendor":"supermicro","product":"x12sdv-8ce-sp4f_firmware"},{"vendor":"supermicro","product":"x12spa-tf_firmware"},{"vendor":"supermicro","product":"x12sped-f_firmware"},{"vendor":"supermicro","product":"x12spg-nf_firmware"},{"vendor":"supermicro","product":"x12spi-tf_firmware"},{"vendor":"supermicro","product":"x12spl-f_firmware"},{"vendor":"supermicro","product":"x12spl-ln4f_firmware"},{"vendor":"supermicro","product":"x12spm-ln4f_firmware"},{"vendor":"supermicro","product":"x12spm-ln6tf_firmware"},{"vendor":"supermicro","product":"x12spm-tf_firmware"},{"vendor":"supermicro","product":"x12spo-f_firmware"},{"vendor":"supermicro","product":"x12spo-ntf_firmware"},{"vendor":"supermicro","product":"x12spt-g_firmware"},{"vendor":"supermicro","product":"x12spt-gc_firmware"},{"vendor":"supermicro","product":"x12spt-pt_firmware"},{"vendor":"supermicro","product":"x12spw-f_firmware"},{"vendor":"supermicro","product":"x12spw-tf_firmware"},{"vendor":"supermicro","product":"x12spz-ln4f_firmware"},{"vendor":"supermicro","product":"x12spz-spln6f_firmware"},{"vendor":"supermicro","product":"x12std-f_firmware"},{"vendor":"supermicro","product":"x12ste-f_firmware"},{"vendor":"supermicro","product":"x12sth-f_firmware"},{"vendor":"supermicro","product":"x12sth-ln4f_firmware"},{"vendor":"supermicro","product":"x12sth-sys_firmware"},{"vendor":"supermicro","product":"x12stl-f_firmware"},{"vendor":"supermicro","product":"x12stl-if_firmware"},{"vendor":"supermicro","product":"x12stn-c-wohs_firmware"},{"vendor":"supermicro","product":"x12stn-c_firmware"},{"vendor":"supermicro","product":"x12stn-e-wohs_firmware"},{"vendor":"supermicro","product":"x12stn-e_firmware"},{"vendor":"supermicro","product":"x12stn-h-wohs_firmware"},{"vendor":"supermicro","product":"x12stn-h_firmware"},{"vendor":"supermicro","product":"x12stn-l-wohs_firmware"},{"vendor":"supermicro","product":"x12stn-l_firmware"},{"vendor":"supermicro","product":"x12stw-f_firmware"},{"vendor":"supermicro","product":"x12stw-tf_firmware"},{"vendor":"supermicro","product":"x13dai-t_firmware"},{"vendor":"supermicro","product":"x13ddw-a_firmware"},{"vendor":"supermicro","product":"x13deg-oa_firmware"},{"vendor":"supermicro","product":"x13deg-oad_firmware"},{"vendor":"supermicro","product":"x13deg-pvc_firmware"},{"vendor":"supermicro","product":"x13deg-qt_firmware"},{"vendor":"supermicro","product":"x13dei-t_firmware"},{"vendor":"supermicro","product":"x13dei_firmware"},{"vendor":"supermicro","product":"x13dem_firmware"},{"vendor":"supermicro","product":"x13det-b_firmware"},{"vendor":"supermicro","product":"x13dgu_firmware"},{"vendor":"supermicro","product":"x13dsf-a_firmware"},{"vendor":"supermicro","product":"x13qeh\\+_firmware"},{"vendor":"supermicro","product":"x13sae-f_firmware"},{"vendor":"supermicro","product":"x13sae_firmware"},{"vendor":"supermicro","product":"x13san-c-wohs_firmware"},{"vendor":"supermicro","product":"x13san-c_firmware"},{"vendor":"supermicro","product":"x13san-e-wohs_firmware"},{"vendor":"supermicro","product":"x13san-e_firmware"},{"vendor":"supermicro","product":"x13san-h-wohs_firmware"},{"vendor":"supermicro","product":"x13san-h_firmware"},{"vendor":"supermicro","product":"x13san-l-wohs_firmware"},{"vendor":"supermicro","product":"x13san-l_firmware"},{"vendor":"supermicro","product":"x13saq_firmware"},{"vendor":"supermicro","product":"x13sav-lvds_firmware"},{"vendor":"supermicro","product":"x13sav-ps_firmware"},{"vendor":"supermicro","product":"x13saz-f_firmware"},{"vendor":"supermicro","product":"x13saz-q_firmware"},{"vendor":"supermicro","product":"x13sedw-f_firmware"},{"vendor":"supermicro","product":"x13seed-f_firmware"},{"vendor":"supermicro","product":"x13seed-sf_firmware"},{"vendor":"supermicro","product":"x13sefr-a_firmware"},{"vendor":"supermicro","product":"x13sei-f_firmware"},{"vendor":"supermicro","product":"x13sei-tf_firmware"},{"vendor":"supermicro","product":"x13sem-f_firmware"},{"vendor":"supermicro","product":"x13sem-tf_firmware"},{"vendor":"supermicro","product":"x13set-g_firmware"},{"vendor":"supermicro","product":"x13set-gc_firmware"},{"vendor":"supermicro","product":"x13sew-f_firmware"},{"vendor":"supermicro","product":"x13sew-tf_firmware"},{"vendor":"supermicro","product":"x13sra-tf_firmware"},{"vendor":"supermicro","product":"x13srn-e-wohs_firmware"},{"vendor":"supermicro","product":"x13srn-e_firmware"},{"vendor":"supermicro","product":"x13srn-h-wohs_firmware"},{"vendor":"supermicro","product":"x13srn-h_firmware"},{"vendor":"supermicro","product":"x13swa-tf_firmware"}],"references":[{"url":"https://www.supermicro.com/en/products/motherboards","tags":["x_transferred","Product"]},{"url":"https://www.supermicro.com/en/support/security_SMTP_Jun_2023","tags":["x_transferred","Vendor Advisory"]},{"url":"https://blog.freax13.de/cve/cve-2023-35861","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35861"},{"url":"https://github.com/advisories/GHSA-qg5r-gm88-j987"}],"sources":{"cve":[{"id":"CVE-2023-35861","description":"A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.","status":"published","published":"2023-07-31T00:00:00Z","modified":"2024-10-22T18:08:38.401Z","updated_at":"2026-11-02T14:35:33.462059Z"}],"euvd":[{"id":"EUVD-2023-39854","description":"A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.","status":"published","published":"2023-07-31T00:00:00Z","modified":"2024-10-22T18:08:38Z","updated_at":"2026-11-03T00:05:22.224445Z"}],"ghsa":[{"id":"GHSA-qg5r-gm88-j987","title":"A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST...","description":"A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.","status":"published","published":"2023-07-31T15:30:23Z","modified":"2024-04-04T06:26:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:56:42.669106Z"}],"nvd":[{"id":"CVE-2023-35861","description":"A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.","status":"published","published":"2023-07-31T13:15:09.833Z","modified":"2026-06-17T06:05:21.837Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:08:18.687088Z"}]}}