{"vulnerability": "cve-2023-40290", "sightings": [{"uuid": "225a8558-3238-4f59-a9d7-78aba3b1cc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "Telegram/1ijNbUbO8yc9BpkvNnkSlSSRpt94dd66KRvmrGADFgP41g", "content": "", "creation_timestamp": "2023-10-06T09:19:18.000000Z"}, {"uuid": "966b5dc8-7b5e-4326-baa6-4f8f650489f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/KomunitiSiber/895", "content": "Supermicro's BMC Firmware Found Vulnerable to Multiple Critical Vulnerabilities\nhttps://thehackernews.com/2023/10/supermicros-bmc-firmware-found.html\n\nMultiple security vulnerabilities have been disclosed in the Intelligent Platform Management Interface (IPMI) firmware for Supermicro baseboard management controllers (BMCs) that could result in privilege escalation and execution of malicious code on affected systems.\nThe seven flaws, tracked from CVE-2023-40284 through CVE-2023-40290, vary in severity from High to Critical, according to Binarly", "creation_timestamp": "2023-10-06T09:18:47.000000Z"}, {"uuid": "c1981f97-0a75-4dd1-9609-56139a2f4b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/thehackernews/3973", "content": "\ud83d\udea8 Multiple security flaws in Supermicro's BMC firmware pose severe risks. Know the risks from CVE-2023-40284 to CVE-2023-40290, allowing unauthenticated attackers to gain root access. \n \nRead: https://thehackernews.com/2023/10/supermicros-bmc-firmware-found.html \n \nIs your system one of the 70,000 exposed?", "creation_timestamp": "2023-10-06T08:11:16.000000Z"}, {"uuid": "ca6e4549-a789-4883-91e7-2f1ee800d16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/cissp/7246", "content": "\ud83d\udea8 Multiple security flaws in Supermicro's BMC firmware pose severe risks. Know the risks from CVE-2023-40284 to CVE-2023-40290, allowing unauthenticated attackers to gain root access. \n \nRead: https://thehackernews.com/2023/10/supermicros-bmc-firmware-found.html \n \nIs your system one of the 70,000 exposed?\n\n\n\u2069-Cyber Security awareness-\n \nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.07.14", "creation_timestamp": "2026-09-01T17:00:17.160413Z"}, {"uuid": "0e3b83bb-f759-4bf6-a9b3-aac01323b90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/hacking_Attack/121668", "content": "Black Hat Ethical Hacking\nSupermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers\n\nSupermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers\nPost Views: 14 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA series of critical vulnerabilities has rocked the Intelligent Platform Management Interface (IPMI) firmware for Supermicro baseboard management controllers (BMCs), sending shockwaves through the server management community. These seven flaws, ranging from High to Critical severity and tracked from CVE-2023-40284 to CVE-2023-40290, have raised alarms as they pave the way for privilege escalation and the execution of malicious code on vulnerable systems.\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6dU2Jj2xSOWZXgGUan14my0jF6hvJQnMrbV4Ykx2rUYVo1sfbhXJ-KGukXS7RZnw43zJMlfIa1epJ4lkzQRS6PDiLqspkDwdDG6tCI4B-ORwPnK7coU9a43BGujl5DJiwGYrfLJnfg5YSlPexulcOqqusDAMkTeaRYDoTfyJiQVEOp39rzeyiuiH9jfJ1/s728-rw-ft-e30/bmc.jpg \n\nBMCs, or baseboard management controllers, are specialized processors integrated into server motherboards, designed to facilitate remote management. Administrators rely on these controllers to monitor crucial hardware metrics, such as temperature, fan speed, and UEFI system firmware updates. An intriguing feature of BMC chips is their ability to remain operational even when the host operating system is offline, making them a potentially lucrative target for deploying persistent malware.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nLet\u2019s delve into the specifics of each vulnerability:\n\n1. \nCVE-2023-40284, CVE-2023-40287, and CVE-2023-40288 (CVSS scores: 9.6): These three cross-site scripting (XSS) vulnerabilities allow remote, unauthenticated attackers to execute arbitrary JavaScript code within the context of a logged-in BMC user.\n\n2. \nCVE-2023-40285 and CVE-2023-40286 (CVSS score: 8.6): Two more XSS flaws open doors for remote, unauthenticated attackers to execute JavaScript code in the context of the logged-in BMC user, either by poisoning browser cookies or local storage.\n\n3. \nCVE-2023-40289 (CVSS score: 9.1): This flaw enables operating system command injection, granting attackers the capability to execute malicious code with administrative privileges. It is deemed critical because it allows authenticated attackers to gain root access, essentially compromising the entire BMC system.\n\n4. \nCVE-2023-40290 (CVSS score: 8.3): A cross-site scripting (XSS) vulnerability that permits remote, unauthenticated attackers to execute arbitrary JavaScript code in the context of the logged-in BMC user. Notably, this flaw is effective when using Internet Explorer 11 on Windows.\nThe gravity of CVE-2023-40289, classified as \u201ccritical\u201d by security experts, cannot be overstated. It provides authenticated attackers with a path to root access, thereby comprehensively compromising the BMC system. This level of privilege opens the door to persistent attacks, even during BMC component reboots, enabling lateral movement within the compromised infrastructure and potential infection of other endpoints.\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMQ6OJ5wjdEL_d7EnIsxslLVZaEYAnix0gyxlz6DgDkPFkG3QQL7hn-qA2vAHAiOj5GwFc2DRG4aRTabvrQIeBgVDzKOE9MobDcjz5rZKltV2uGd4T3OppDnzSIvnC-yEk-uqTQSgG6n6zuWbrXB4e5I0YijqhMhEmCtyyl-84BePggwTUL17BE36ctcfG/s728-rw-ft-e30/shodan.jpg \n\nThe other six vulnerabilities, particularly CVE-2023-40284, CVE-2023-40287, and CVE-2023-40288, serve as stepping stones for attackers to establish accounts with admin privileges in the web server component of the BMC[...]", "creation_timestamp": "2026-09-01T20:00:46.667969Z"}, {"uuid": "be928851-31ae-4eec-83c7-978ddb53ab54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/hacking_Attack/121668", "content": "Black Hat Ethical Hacking\nSupermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers\n\nSupermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers\nPost Views: 14 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA series of critical vulnerabilities has rocked the Intelligent Platform Management Interface (IPMI) firmware for Supermicro baseboard management controllers (BMCs), sending shockwaves through the server management community. These seven flaws, ranging from High to Critical severity and tracked from CVE-2023-40284 to CVE-2023-40290, have raised alarms as they pave the way for privilege escalation and the execution of malicious code on vulnerable systems.\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6dU2Jj2xSOWZXgGUan14my0jF6hvJQnMrbV4Ykx2rUYVo1sfbhXJ-KGukXS7RZnw43zJMlfIa1epJ4lkzQRS6PDiLqspkDwdDG6tCI4B-ORwPnK7coU9a43BGujl5DJiwGYrfLJnfg5YSlPexulcOqqusDAMkTeaRYDoTfyJiQVEOp39rzeyiuiH9jfJ1/s728-rw-ft-e30/bmc.jpg \n\nBMCs, or baseboard management controllers, are specialized processors integrated into server motherboards, designed to facilitate remote management. Administrators rely on these controllers to monitor crucial hardware metrics, such as temperature, fan speed, and UEFI system firmware updates. An intriguing feature of BMC chips is their ability to remain operational even when the host operating system is offline, making them a potentially lucrative target for deploying persistent malware.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nLet\u2019s delve into the specifics of each vulnerability:\n\n1. \nCVE-2023-40284, CVE-2023-40287, and CVE-2023-40288 (CVSS scores: 9.6): These three cross-site scripting (XSS) vulnerabilities allow remote, unauthenticated attackers to execute arbitrary JavaScript code within the context of a logged-in BMC user.\n\n2. \nCVE-2023-40285 and CVE-2023-40286 (CVSS score: 8.6): Two more XSS flaws open doors for remote, unauthenticated attackers to execute JavaScript code in the context of the logged-in BMC user, either by poisoning browser cookies or local storage.\n\n3. \nCVE-2023-40289 (CVSS score: 9.1): This flaw enables operating system command injection, granting attackers the capability to execute malicious code with administrative privileges. It is deemed critical because it allows authenticated attackers to gain root access, essentially compromising the entire BMC system.\n\n4. \nCVE-2023-40290 (CVSS score: 8.3): A cross-site scripting (XSS) vulnerability that permits remote, unauthenticated attackers to execute arbitrary JavaScript code in the context of the logged-in BMC user. Notably, this flaw is effective when using Internet Explorer 11 on Windows.\nThe gravity of CVE-2023-40289, classified as \u201ccritical\u201d by security experts, cannot be overstated. It provides authenticated attackers with a path to root access, thereby comprehensively compromising the BMC system. This level of privilege opens the door to persistent attacks, even during BMC component reboots, enabling lateral movement within the compromised infrastructure and potential infection of other endpoints.\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMQ6OJ5wjdEL_d7EnIsxslLVZaEYAnix0gyxlz6DgDkPFkG3QQL7hn-qA2vAHAiOj5GwFc2DRG4aRTabvrQIeBgVDzKOE9MobDcjz5rZKltV2uGd4T3OppDnzSIvnC-yEk-uqTQSgG6n6zuWbrXB4e5I0YijqhMhEmCtyyl-84BePggwTUL17BE36ctcfG/s728-rw-ft-e30/shodan.jpg \n\nThe other six vulnerabilities, particularly CVE-2023-40284, CVE-2023-40287, and CVE-2023-40288, serve as stepping stones for attackers to establish accounts with admin privileges in the web server component of the BMC[...]", "creation_timestamp": "2026-09-02T01:01:06.859456Z"}, {"uuid": "d3d62a98-5e3a-4b86-88a5-5cbcdfa470fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/cissp/7246", "content": "\ud83d\udea8 Multiple security flaws in Supermicro's BMC firmware pose severe risks. Know the risks from CVE-2023-40284 to CVE-2023-40290, allowing unauthenticated attackers to gain root access. \n \nRead: https://thehackernews.com/2023/10/supermicros-bmc-firmware-found.html \n \nIs your system one of the 70,000 exposed?\n\n\n\u2069-Cyber Security awareness-\n \nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.07.14", "creation_timestamp": "2026-09-02T01:03:55.768525Z"}, {"uuid": "f1794a7c-ef69-4a32-94cc-111bb76a1a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/hacking_Attack/121668", "content": "Black Hat Ethical Hacking\nSupermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers\n\nSupermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers\nPost Views: 14 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA series of critical vulnerabilities has rocked the Intelligent Platform Management Interface (IPMI) firmware for Supermicro baseboard management controllers (BMCs), sending shockwaves through the server management community. These seven flaws, ranging from High to Critical severity and tracked from CVE-2023-40284 to CVE-2023-40290, have raised alarms as they pave the way for privilege escalation and the execution of malicious code on vulnerable systems.\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6dU2Jj2xSOWZXgGUan14my0jF6hvJQnMrbV4Ykx2rUYVo1sfbhXJ-KGukXS7RZnw43zJMlfIa1epJ4lkzQRS6PDiLqspkDwdDG6tCI4B-ORwPnK7coU9a43BGujl5DJiwGYrfLJnfg5YSlPexulcOqqusDAMkTeaRYDoTfyJiQVEOp39rzeyiuiH9jfJ1/s728-rw-ft-e30/bmc.jpg \n\nBMCs, or baseboard management controllers, are specialized processors integrated into server motherboards, designed to facilitate remote management. Administrators rely on these controllers to monitor crucial hardware metrics, such as temperature, fan speed, and UEFI system firmware updates. An intriguing feature of BMC chips is their ability to remain operational even when the host operating system is offline, making them a potentially lucrative target for deploying persistent malware.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nLet\u2019s delve into the specifics of each vulnerability:\n\n1. \nCVE-2023-40284, CVE-2023-40287, and CVE-2023-40288 (CVSS scores: 9.6): These three cross-site scripting (XSS) vulnerabilities allow remote, unauthenticated attackers to execute arbitrary JavaScript code within the context of a logged-in BMC user.\n\n2. \nCVE-2023-40285 and CVE-2023-40286 (CVSS score: 8.6): Two more XSS flaws open doors for remote, unauthenticated attackers to execute JavaScript code in the context of the logged-in BMC user, either by poisoning browser cookies or local storage.\n\n3. \nCVE-2023-40289 (CVSS score: 9.1): This flaw enables operating system command injection, granting attackers the capability to execute malicious code with administrative privileges. It is deemed critical because it allows authenticated attackers to gain root access, essentially compromising the entire BMC system.\n\n4. \nCVE-2023-40290 (CVSS score: 8.3): A cross-site scripting (XSS) vulnerability that permits remote, unauthenticated attackers to execute arbitrary JavaScript code in the context of the logged-in BMC user. Notably, this flaw is effective when using Internet Explorer 11 on Windows.\nThe gravity of CVE-2023-40289, classified as \u201ccritical\u201d by security experts, cannot be overstated. It provides authenticated attackers with a path to root access, thereby comprehensively compromising the BMC system. This level of privilege opens the door to persistent attacks, even during BMC component reboots, enabling lateral movement within the compromised infrastructure and potential infection of other endpoints.\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMQ6OJ5wjdEL_d7EnIsxslLVZaEYAnix0gyxlz6DgDkPFkG3QQL7hn-qA2vAHAiOj5GwFc2DRG4aRTabvrQIeBgVDzKOE9MobDcjz5rZKltV2uGd4T3OppDnzSIvnC-yEk-uqTQSgG6n6zuWbrXB4e5I0YijqhMhEmCtyyl-84BePggwTUL17BE36ctcfG/s728-rw-ft-e30/shodan.jpg \n\nThe other six vulnerabilities, particularly CVE-2023-40284, CVE-2023-40287, and CVE-2023-40288, serve as stepping stones for attackers to establish accounts with admin privileges in the web server component of the BMC[...]", "creation_timestamp": "2026-09-04T03:00:03.816736Z"}, {"uuid": "65d51701-220e-47d8-adef-86fa98d5db05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/hacking_Attack/121668", "content": "Black Hat Ethical Hacking\nSupermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers\n\nSupermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers\nPost Views: 14 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA series of critical vulnerabilities has rocked the Intelligent Platform Management Interface (IPMI) firmware for Supermicro baseboard management controllers (BMCs), sending shockwaves through the server management community. These seven flaws, ranging from High to Critical severity and tracked from CVE-2023-40284 to CVE-2023-40290, have raised alarms as they pave the way for privilege escalation and the execution of malicious code on vulnerable systems.\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6dU2Jj2xSOWZXgGUan14my0jF6hvJQnMrbV4Ykx2rUYVo1sfbhXJ-KGukXS7RZnw43zJMlfIa1epJ4lkzQRS6PDiLqspkDwdDG6tCI4B-ORwPnK7coU9a43BGujl5DJiwGYrfLJnfg5YSlPexulcOqqusDAMkTeaRYDoTfyJiQVEOp39rzeyiuiH9jfJ1/s728-rw-ft-e30/bmc.jpg \n\nBMCs, or baseboard management controllers, are specialized processors integrated into server motherboards, designed to facilitate remote management. Administrators rely on these controllers to monitor crucial hardware metrics, such as temperature, fan speed, and UEFI system firmware updates. An intriguing feature of BMC chips is their ability to remain operational even when the host operating system is offline, making them a potentially lucrative target for deploying persistent malware.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nLet\u2019s delve into the specifics of each vulnerability:\n\n1. \nCVE-2023-40284, CVE-2023-40287, and CVE-2023-40288 (CVSS scores: 9.6): These three cross-site scripting (XSS) vulnerabilities allow remote, unauthenticated attackers to execute arbitrary JavaScript code within the context of a logged-in BMC user.\n\n2. \nCVE-2023-40285 and CVE-2023-40286 (CVSS score: 8.6): Two more XSS flaws open doors for remote, unauthenticated attackers to execute JavaScript code in the context of the logged-in BMC user, either by poisoning browser cookies or local storage.\n\n3. \nCVE-2023-40289 (CVSS score: 9.1): This flaw enables operating system command injection, granting attackers the capability to execute malicious code with administrative privileges. It is deemed critical because it allows authenticated attackers to gain root access, essentially compromising the entire BMC system.\n\n4. \nCVE-2023-40290 (CVSS score: 8.3): A cross-site scripting (XSS) vulnerability that permits remote, unauthenticated attackers to execute arbitrary JavaScript code in the context of the logged-in BMC user. Notably, this flaw is effective when using Internet Explorer 11 on Windows.\nThe gravity of CVE-2023-40289, classified as \u201ccritical\u201d by security experts, cannot be overstated. It provides authenticated attackers with a path to root access, thereby comprehensively compromising the BMC system. This level of privilege opens the door to persistent attacks, even during BMC component reboots, enabling lateral movement within the compromised infrastructure and potential infection of other endpoints.\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMQ6OJ5wjdEL_d7EnIsxslLVZaEYAnix0gyxlz6DgDkPFkG3QQL7hn-qA2vAHAiOj5GwFc2DRG4aRTabvrQIeBgVDzKOE9MobDcjz5rZKltV2uGd4T3OppDnzSIvnC-yEk-uqTQSgG6n6zuWbrXB4e5I0YijqhMhEmCtyyl-84BePggwTUL17BE36ctcfG/s728-rw-ft-e30/shodan.jpg \n\nThe other six vulnerabilities, particularly CVE-2023-40284, CVE-2023-40287, and CVE-2023-40288, serve as stepping stones for attackers to establish accounts with admin privileges in the web server component of the BMC[...]", "creation_timestamp": "2026-09-05T01:00:42.342718Z"}, {"uuid": "aff77256-62c7-42e2-9dc5-f3fcb49b7ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/cissp/7246", "content": "\ud83d\udea8 Multiple security flaws in Supermicro's BMC firmware pose severe risks. Know the risks from CVE-2023-40284 to CVE-2023-40290, allowing unauthenticated attackers to gain root access. \n \nRead: https://thehackernews.com/2023/10/supermicros-bmc-firmware-found.html \n \nIs your system one of the 70,000 exposed?\n\n\n\u2069-Cyber Security awareness-\n \nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.07.14", "creation_timestamp": "2026-09-09T20:00:06.455904Z"}, {"uuid": "926baf6e-a4ff-4437-b4a1-3529e0e8aa9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40290", "type": "seen", "source": "https://t.me/cissp/7246", "content": "\ud83d\udea8 Multiple security flaws in Supermicro's BMC firmware pose severe risks. Know the risks from CVE-2023-40284 to CVE-2023-40290, allowing unauthenticated attackers to gain root access. \n \nRead: https://thehackernews.com/2023/10/supermicros-bmc-firmware-found.html \n \nIs your system one of the 70,000 exposed?\n\n\n\u2069-Cyber Security awareness-\n \nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.07.14", "creation_timestamp": "2026-09-10T00:00:22.089645Z"}]}