CVE-2023-40290

—

CVSS 3.1

8.3 high

EPSS

<1%p49

Published

Mar 27, 2024 (Mar 27, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.

Vendors: supermicro
Products: x11ssm-f firmware, x11sae-f firmware, x11sse-f firmware
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news2 stories

Supermicro's BMC Firmware Found Vulnerable to Multiple Critical Vulnerabilities

The Hacker NewsOct 6, 06:02 UTC · Oct 6, 2023Vulnerability CVE-2023-40284 CVE-2023-40290 CVE-2023-40287+4 CVEs

Vulnerabilities in Supermicro BMCs could allow for unkillable server rootkits

Ars Technica · SecurityOct 4, 22:21 UTC · Oct 4, 2023Vulnerability CVE-2023-40289 CVE-2023-40284 CVE-2023-40287+4 CVEs