CVE-2023-34853

High

Description

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

SeverityHigh
CVSS7.8
Exploit probability—
ProductSupermicro X12dpg-qr Firmware
PublishedAug 22, 2023
First seenAug 22, 2023

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
supermicro x12dpg-qr_firmwareNo range specified—
supermicro x12dai-n6_firmwareNo range specified—
supermicro x12ddw-a6_firmwareNo range specified—
supermicro x12dgo-6_firmwareNo range specified—
supermicro x12dgq-r_firmwareNo range specified—
supermicro x12dgu_firmwareNo range specified—
supermicro x12dhm-6_firmwareNo range specified—
supermicro x12dpd-a6m25_firmwareNo range specified—
supermicro x12dpfr-an6_firmwareNo range specified—
supermicro x12dpg-ar_firmwareNo range specified—
supermicro x12dpg-oa6_firmwareNo range specified—
supermicro x12dpg-oa6-gd2_firmwareNo range specified—
supermicro x12dpg-qbt6_firmwareNo range specified—
supermicro x12dpg-qt6_firmwareNo range specified—
supermicro x12dpg-u6_firmwareNo range specified—
supermicro x12dpi-n6_firmwareNo range specified—
supermicro x12dpi-nt6_firmwareNo range specified—
supermicro x12dpl-i6_firmwareNo range specified—
supermicro x12dpl-nt6_firmwareNo range specified—
supermicro x12dpt-b6_firmwareNo range specified—
supermicro x12dpt-pt46_firmwareNo range specified—
supermicro x12dpt-pt6_firmwareNo range specified—
supermicro x12dpu-6_firmwareNo range specified—
supermicro x12dsc-6_firmwareNo range specified—
supermicro x12qch\+_firmwareNo range specified—
supermicro x12sae_firmwareNo range specified—
supermicro x12sae-5_firmwareNo range specified—
supermicro x12sca-5f_firmwareNo range specified—
supermicro x12sca-f_firmwareNo range specified—
supermicro x12scq_firmwareNo range specified—
supermicro x12scv-lvds_firmwareNo range specified—
supermicro x12scv-w_firmwareNo range specified—
supermicro x12scz-f_firmwareNo range specified—
supermicro x12scz-qf_firmwareNo range specified—
supermicro x12scz-tln4f_firmwareNo range specified—
supermicro x12sdv-10c-sp6f_firmwareNo range specified—
supermicro x12sdv-10c-spt4f_firmwareNo range specified—
supermicro x12sdv-14c-spt8f_firmwareNo range specified—
supermicro x12sdv-16c-spt8f_firmwareNo range specified—
supermicro x12sdv-20c-spt8f_firmwareNo range specified—
supermicro x12sdv-4c-sp6f_firmwareNo range specified—
supermicro x12sdv-4c-spt4f_firmwareNo range specified—
supermicro x12sdv-4c-spt8f_firmwareNo range specified—
supermicro x12sdv-8c-sp6f_firmwareNo range specified—
supermicro x12sdv-8c-spt4f_firmwareNo range specified—
supermicro x12sdv-8c-spt8f_firmwareNo range specified—
supermicro x12sdv-8ce-sp4f_firmwareNo range specified—
supermicro x12spa-tf_firmwareNo range specified—
supermicro x12sped-f_firmwareNo range specified—
supermicro x12spg-nf_firmwareNo range specified—
supermicro x12spi-tf_firmwareNo range specified—
supermicro x12spl-f_firmwareNo range specified—
supermicro x12spl-ln4f_firmwareNo range specified—
supermicro x12spm-ln4f_firmwareNo range specified—
supermicro x12spm-ln6tf_firmwareNo range specified—
supermicro x12spm-tf_firmwareNo range specified—
supermicro x12spo-f_firmwareNo range specified—
supermicro x12spo-ntf_firmwareNo range specified—
supermicro x12spt-g_firmwareNo range specified—
supermicro x12spt-gc_firmwareNo range specified—
supermicro x12spt-pt_firmwareNo range specified—
supermicro x12spw-f_firmwareNo range specified—
supermicro x12spw-tf_firmwareNo range specified—
supermicro x12spz-ln4f_firmwareNo range specified—
supermicro x12spz-spln6f_firmwareNo range specified—
supermicro x12std-f_firmwareNo range specified—
supermicro x12ste-f_firmwareNo range specified—
supermicro x12sth-f_firmwareNo range specified—
supermicro x12sth-ln4f_firmwareNo range specified—
supermicro x12sth-sys_firmwareNo range specified—
supermicro x12stl-f_firmwareNo range specified—
supermicro x12stl-if_firmwareNo range specified—
supermicro x12stn-c_firmwareNo range specified—
supermicro x12stn-c-wohs_firmwareNo range specified—
supermicro x12stn-e_firmwareNo range specified—
supermicro x12stn-e-wohs_firmwareNo range specified—
supermicro x12stn-h_firmwareNo range specified—
supermicro x12stn-h-wohs_firmwareNo range specified—
supermicro x12stn-l_firmwareNo range specified—
supermicro x12stn-l-wohs_firmwareNo range specified—
supermicro x12stw-f_firmwareNo range specified—
supermicro x12stw-tf_firmwareNo range specified—
supermicro h11dsi_firmwareNo range specified—
supermicro h11dsi-nt_firmwareNo range specified—
supermicro h11dst-b_firmwareNo range specified—
supermicro h11dsu-in_firmwareNo range specified—
supermicro h12dgo-6_firmwareNo range specified—
supermicro h12dgq-nt6_firmwareNo range specified—
supermicro h12dsg-o-cpu_firmwareNo range specified—
supermicro h12dsg-q-cpu6_firmwareNo range specified—
supermicro h12dsi-n6_firmwareNo range specified—
supermicro h12dsi-nt6_firmwareNo range specified—
supermicro h12dst-b_firmwareNo range specified—
supermicro h12dsu-in_firmwareNo range specified—
supermicro h12dsu-inr_firmwareNo range specified—
supermicro h12ssff-an6_firmwareNo range specified—
supermicro h12ssfr-an6_firmwareNo range specified—
supermicro h12ssg-an6_firmwareNo range specified—
supermicro h12ssg-anp6_firmwareNo range specified—
supermicro h12ssl-c_firmwareNo range specified—
supermicro h12ssl-ct_firmwareNo range specified—
supermicro h12ssl-i_firmwareNo range specified—
supermicro h12ssl-nt_firmwareNo range specified—
supermicro h12sst-ps_firmwareNo range specified—
supermicro h12ssw-an6_firmwareNo range specified—
supermicro h12ssw-in_firmwareNo range specified—
supermicro h12ssw-inl_firmwareNo range specified—
supermicro h12ssw-inr_firmwareNo range specified—
supermicro h12ssw-nt_firmwareNo range specified—
supermicro h12ssw-ntl_firmwareNo range specified—
supermicro h12ssw-ntr_firmwareNo range specified—
supermicro h13dsg-o-cpu_firmwareNo range specified—
supermicro h13dsg-o-cpu-d_firmwareNo range specified—
supermicro h13dsh_firmwareNo range specified—
supermicro h13sae-mf_firmwareNo range specified—
supermicro h13srd-f_firmwareNo range specified—
supermicro h13ssf_firmwareNo range specified—
supermicro h13ssh_firmwareNo range specified—
supermicro h13ssl-n_firmwareNo range specified—
supermicro h13ssl-nt_firmwareNo range specified—
supermicro h13sst-g_firmwareNo range specified—
supermicro h13sst-gc_firmwareNo range specified—
supermicro h13ssw_firmwareNo range specified—
supermicro x11dac_firmwareNo range specified—
supermicro x11dai-n_firmwareNo range specified—
supermicro x11ddw-l_firmwareNo range specified—
supermicro x11ddw-nt_firmwareNo range specified—
supermicro x11dgo-t_firmwareNo range specified—
supermicro x11dgq_firmwareNo range specified—
supermicro x11dpff-sn_firmwareNo range specified—
supermicro x11dpfr-s_firmwareNo range specified—
supermicro x11dpfr-sn_firmwareNo range specified—
supermicro x11dpg-ot-cpu_firmwareNo range specified—
supermicro x11dpg-qt_firmwareNo range specified—
supermicro x11dpg-sn_firmwareNo range specified—
supermicro x11dph-i_firmwareNo range specified—
supermicro x11dph-t_firmwareNo range specified—
supermicro x11dph-tq_firmwareNo range specified—
supermicro x11dpi-n_firmwareNo range specified—
supermicro x11dpi-nt_firmwareNo range specified—
supermicro x11dpl-i_firmwareNo range specified—
supermicro x11dps-re_firmwareNo range specified—
supermicro x11dpt-b_firmwareNo range specified—
supermicro x11dpt-bh_firmwareNo range specified—
supermicro x11dpt-l_firmwareNo range specified—
supermicro x11dpt-ps_firmwareNo range specified—
supermicro x11dpu_firmwareNo range specified—
supermicro x11dpu-v_firmwareNo range specified—
supermicro x11dpu-x_firmwareNo range specified—
supermicro x11dpu-xll_firmwareNo range specified—
supermicro x11dpu-z\+_firmwareNo range specified—
supermicro x11dpu-ze\+_firmwareNo range specified—
supermicro x11dpx-t_firmwareNo range specified—
supermicro x11dsc\+_firmwareNo range specified—
supermicro x11dsf-e_firmwareNo range specified—
supermicro x11dsn-ts_firmwareNo range specified—
supermicro x11dsn-tsq_firmwareNo range specified—
supermicro x11opi-cpu_firmwareNo range specified—
supermicro x11qph\+_firmwareNo range specified—
supermicro x11sae_firmwareNo range specified—
supermicro x11sae_m_firmwareNo range specified—
supermicro x11sat_firmwareNo range specified—
supermicro x11sba_firmwareNo range specified—
supermicro x11sca_firmwareNo range specified—
supermicro x11sca-f_firmwareNo range specified—
supermicro x11sca-w_firmwareNo range specified—
supermicro x11scd-f_firmwareNo range specified—
supermicro x11sch-f_firmwareNo range specified—
supermicro x11sch-ln4f_firmwareNo range specified—
supermicro x11scl-f_firmwareNo range specified—
supermicro x11scl-if_firmwareNo range specified—
supermicro x11scl-ln4f_firmwareNo range specified—
supermicro x11scm-f_firmwareNo range specified—
supermicro x11scm-ln8f_firmwareNo range specified—
supermicro x11scw-f_firmwareNo range specified—
supermicro x11sdd-18c-f_firmwareNo range specified—
supermicro x11sdd-8c-f_firmwareNo range specified—
supermicro x11sds-12c_firmwareNo range specified—
supermicro x11sds-16c_firmwareNo range specified—
supermicro x11sds-8c_firmwareNo range specified—
supermicro x11spa-t_firmwareNo range specified—
supermicro x11spa-tf_firmwareNo range specified—
supermicro x11spg-tf_firmwareNo range specified—
supermicro x11sph-nctf_firmwareNo range specified—
supermicro x11sph-nctpf_firmwareNo range specified—
supermicro x11spi-tf_firmwareNo range specified—
supermicro x11spl-f_firmwareNo range specified—
supermicro x11spm-f_firmwareNo range specified—
supermicro x11spm-tf_firmwareNo range specified—
supermicro x11spm-tpf_firmwareNo range specified—
supermicro x11spw-ctf_firmwareNo range specified—
supermicro x11spw-tf_firmwareNo range specified—
supermicro x11sra_firmwareNo range specified—
supermicro x11sri-if_firmwareNo range specified—
supermicro x11srl-f_firmwareNo range specified—
supermicro x11srm_firmwareNo range specified—
supermicro x11srm-f_firmwareNo range specified—
supermicro x11srm-vf_firmwareNo range specified—
supermicro x11ssd-f_firmwareNo range specified—
supermicro x11sse-f_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.