CVE-2023-34853

—

CVSS 3.1

7.8 high

EPSS

<1%p33

Published

Aug 22, 2023 (Aug 22, 2023)

Modified

Jun 17, 2026

Description

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

Vendors: supermicro
Products: x12dai-n6 firmware, x12ddw-a6 firmware, x12dgo-6 firmware, x12dgq-r firmware, x12dgu firmware, x12dhm-6 firmware, x12dpd-a6m25 firmware, x12dpfr-an6 firmware, x12dpg-ar firmware, x12dpg-oa6 firmware, x12dpg-oa6-gd2 firmware, x12dpg-qbt6 firmware
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.