Administrator account creation via unsanitized port parameter

DOM-based XSS in Supermicro X11SSM-F, X11SAE-F, and X11SSE-F firmware 1.66 allows remote attackers to create BMC administrator accounts. The config_ssl_fw_reset page reads the port query parameter, decodes it, embeds it in a URL string, and assigns that string to reset_string.innerHTML without sanitization. Exploitation requires a logged-in BMC administrator to open a crafted phishing link; the injected script can steal the CSRF token, create an administrator account, and restart the BMC.