Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Freax13

#24158of 53,624
9.8Total CVSS
Vulnerabilities · 1
PT-2023-25350
9.8
2023-07-31
Supermicro · Supermicro Motherboards · CVE-2023-35861
**Name of the Vulnerable Software and Affected Versions** Supermicro motherboards versions prior to 03.10.35 **Description** A shell-injection vulnerability in email notifications on Supermicro motherboards allows remote attackers to inject and execute arbitrary commands as root on the BMC. **Recommendations** For versions prior to 03.10.35, update to version 03.10.35 or later to resolve the issue. As a temporary workaround, consider disabling email notifications on the BMC until a patch is available. Restrict access to the BMC to minimize the risk of exploitation.