Supermicro · Supermicro Motherboards · CVE-2023-35861
**Name of the Vulnerable Software and Affected Versions**
Supermicro motherboards versions prior to 03.10.35
**Description**
A shell-injection vulnerability in email notifications on Supermicro motherboards allows remote attackers to inject and execute arbitrary commands as root on the BMC.
**Recommendations**
For versions prior to 03.10.35, update to version 03.10.35 or later to resolve the issue. As a temporary workaround, consider disabling email notifications on the BMC until a patch is available. Restrict access to the BMC to minimize the risk of exploitation.