Back to the CVE list
CVE-2022-43309

Incorrect permission assignment in Supermicro X11ssl Cf

CVSS score

5.5

EPSS probability

%0.2

Risk score

0.0

Published

3 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2022-43309 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2022-43309 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1supermicrox11ssl-cf firmware View
2supermicrox11ssl-cf View
3supermicrox11dac firmware View
4supermicrox11dac View
5supermicrox11dai-n firmware View
6supermicrox11dai-n View
7supermicrox11ddw-l firmware View
8supermicrox11ddw-l View
9supermicrox11ddw-nt firmware View
10supermicrox11ddw-nt View
11supermicrox11dgo-t firmware View
12supermicrox11dgo-t View
13supermicrox11dgq firmware View
14supermicrox11dgq View
15supermicrox11dpff-sn firmware View
16supermicrox11dpff-sn View
17supermicrox11dpfr-s firmware View
18supermicrox11dpfr-s View
19supermicrox11dpfr-sn firmware View
20supermicrox11dpfr-sn View
21supermicrox11dpg-ot-cpu firmware View
22supermicrox11dpg-ot-cpu View
23supermicrox11dpg-qt firmware View
24supermicrox11dpg-qt View
25supermicrox11dpg-sn firmware View
26supermicrox11dpg-sn View
27supermicrox11dph-i firmware View
28supermicrox11dph-i View
29supermicrox11dph-t firmware View
30supermicrox11dph-t View
31supermicrox11dph-tq firmware View
32supermicrox11dph-tq View
33supermicrox11dpi-n firmware View
34supermicrox11dpi-n View
35supermicrox11dpi-nt firmware View
36supermicrox11dpi-nt View
37supermicrox11dpl-i firmware View
38supermicrox11dpl-i View
39supermicrox11dps-re firmware View
40supermicrox11dps-re View
41supermicrox11dpt-b firmware View
42supermicrox11dpt-b View
43supermicrox11dpt-bh firmware View
44supermicrox11dpt-bh View
45supermicrox11dpt-l firmware View
46supermicrox11dpt-l View
47supermicrox11dpt-ps firmware View
48supermicrox11dpt-ps View
49supermicrox11dpu firmware View
50supermicrox11dpu View
51supermicrox11dpu-v firmware View
52supermicrox11dpu-v View
53supermicrox11dpu-x firmware View
54supermicrox11dpu-x View
55supermicrox11dpu-xll firmware View
56supermicrox11dpu-xll View
57supermicrox11dpu-z+ firmware View
58supermicrox11dpu-z+ View
59supermicrox11dpu-ze+ firmware View
60supermicrox11dpu-ze+ View
61supermicrox11dpx-t firmware View
62supermicrox11dpx-t View
63supermicrox11dsc+ firmware View
64supermicrox11dsc+ View
65supermicrox11dsf-e firmware View
66supermicrox11dsf-e View
67supermicrox11dsn-ts firmware View
68supermicrox11dsn-ts View
69supermicrox11dsn-tsq firmware View
70supermicrox11dsn-tsq View
71supermicrox11opi-cpu firmware View
72supermicrox11opi-cpu View
73supermicrox11qph+ firmware View
74supermicrox11qph+ View
75supermicrox11sae firmware View
76supermicrox11sae View
77supermicrox11sae m firmware View
78supermicrox11sae m View
79supermicrox11sat firmware View
80supermicrox11sat View
81supermicrox11sba firmware View
82supermicrox11sba View
83supermicrox11sca firmware View
84supermicrox11sca View
85supermicrox11sca-f firmware View
86supermicrox11sca-f View
87supermicrox11sca-w firmware View
88supermicrox11sca-w View
89supermicrox11scd-f firmware View
90supermicrox11scd-f View
91supermicrox11sch-f firmware View
92supermicrox11sch-f View
93supermicrox11sch-ln4f firmware View
94supermicrox11sch-ln4f View
95supermicrox11scl-f firmware View
96supermicrox11scl-f View
97supermicrox11scl-if firmware View
98supermicrox11scl-if View
99supermicrox11scl-ln4f firmware View
100supermicrox11scl-ln4f View
101supermicrox11scm-f firmware View
102supermicrox11scm-f View
103supermicrox11scm-ln8f firmware View
104supermicrox11scm-ln8f View
105supermicrox11scw-f firmware View
106supermicrox11scw-f View
107supermicrox11sdd-18c-f firmware View
108supermicrox11sdd-18c-f View
109supermicrox11sdd-8c-f firmware View
110supermicrox11sdd-8c-f View
111supermicrox11sds-12c firmware View
112supermicrox11sds-12c View
113supermicrox11sds-16c firmware View
114supermicrox11sds-16c View
115supermicrox11sds-8c firmware View
116supermicrox11sds-8c View
117supermicrox11spa-t firmware View
118supermicrox11spa-t View
119supermicrox11spa-tf firmware View
120supermicrox11spa-tf View
121supermicrox11spg-tf firmware View
122supermicrox11spg-tf View
123supermicrox11sph-nctf firmware View
124supermicrox11sph-nctf View
125supermicrox11sph-nctpf firmware View
126supermicrox11sph-nctpf View
127supermicrox11spi-tf firmware View
128supermicrox11spi-tf View
129supermicrox11spl-f firmware View
130supermicrox11spl-f View
131supermicrox11spm-f firmware View
132supermicrox11spm-f View
133supermicrox11spm-tf firmware View
134supermicrox11spm-tf View
135supermicrox11spm-tpf firmware View
136supermicrox11spm-tpf View
137supermicrox11spw-ctf firmware View
138supermicrox11spw-ctf View
139supermicrox11spw-tf firmware View
140supermicrox11spw-tf View
141supermicrox11sra firmware View
142supermicrox11sra View
143supermicrox11sri-if firmware View
144supermicrox11sri-if View
145supermicrox11srl-f firmware View
146supermicrox11srl-f View
147supermicrox11srm firmware View
148supermicrox11srm View
149supermicrox11srm-f firmware View
150supermicrox11srm-f View
151supermicrox11srm-vf firmware View
152supermicrox11srm-vf View
153supermicrox11ssd-f firmware View
154supermicrox11ssd-f View
155supermicrox11sse-f firmware View
156supermicrox11sse-f View
157supermicrox11ssh-ctf firmware View
158supermicrox11ssh-ctf View
159supermicrox11ssh-f firmware View
160supermicrox11ssh-f View
161supermicrox11ssh-gf-1585 firmware View
162supermicrox11ssh-gf-1585 View
163supermicrox11ssh-gf-1585l firmware View
164supermicrox11ssh-gf-1585l View
165supermicrox11ssh-gtf-1585 firmware View
166supermicrox11ssh-gtf-1585 View
167supermicrox11ssh-gtf-1585l firmware View
168supermicrox11ssh-gtf-1585l View
169supermicrox11ssh-ln4f firmware View
170supermicrox11ssh-ln4f View
171supermicrox11ssh-tf firmware View
172supermicrox11ssh-tf View
173supermicrox11ssi-ln4f firmware View
174supermicrox11ssi-ln4f View
175supermicrox11ssl firmware View
176supermicrox11ssl View
177supermicrox11ssl-cf firmware View
178supermicrox11ssl-f firmware View
179supermicrox11ssl-f View
180supermicrox11ssl-nf firmware View
181supermicrox11ssl-nf View
182supermicrox11ssm firmware View
183supermicrox11ssm View
184supermicrox11ssm-f firmware View
185supermicrox11ssm-f View
186supermicrox11ssn firmware View
187supermicrox11ssn View
188supermicrox11ssq firmware View
189supermicrox11ssq View
190supermicrox11ssql firmware View
191supermicrox11ssql View
192supermicrox11ssv-lvds firmware View
193supermicrox11ssv-lvds View
194supermicrox11ssv-q firmware View
195supermicrox11ssv-q View
196supermicrox11ssw-4tf firmware View
197supermicrox11ssw-4tf View
198supermicrox11ssw-f firmware View
199supermicrox11ssw-f View
200supermicrox11ssw-tf firmware View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
5.5CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-43309 is associated with the following CWEs:

CWE-732: Common Weakness Enumeration Entry CWE-732

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-43309 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://www.supermicro.com/en/support/security_VRM_Jan_2023vendor-advisory

CVSS Vector Radar Chart

5.5 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

S
supermicro logo
supermicro

Weakness Type (CWE & CAPEC)

CWE-732

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-43309"