CVE-2013-3619

🗓️ 02 Jan 2020 17:51:46Reported by certccType

CVE-2013-3619: Hardcoded private encryption keys in Supermicro X9 and X8 generation motherboards

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2013-3619	29 May 201815:50	–	circl
Check Point Advisories	Supermicro Onboard IPMI Static SSL Certificate Scanner Information Disclosure (CVE-2013-3619)	12 Nov 201300:00	–	checkpoint_advisories
Cvelist	CVE-2013-3619	2 Jan 202017:51	–	cvelist
EUVD	EUVD-2013-3553	7 Oct 202500:30	–	euvd
Metasploit	Supermicro Onboard IPMI Static SSL Certificate Scanner	6 Nov 201319:45	–	metasploit
NVD	CVE-2013-3619	2 Jan 202018:15	–	nvd
OpenVAS	Known/Static SSH Private Key Used (TCP)	14 Oct 201500:00	–	openvas
Packet Storm	Supermicro Onboard IPMI Static SSL Certificate Scanner	1 Sep 202400:00	–	packetstorm
Prion	Design/Logic Flaw	2 Jan 202018:15	–	prion
Tenable Nessus	SSH Static Key Accepted	8 May 201400:00	–	nessus

NVD

Node

supermicro smt_x9_firmwareRange<3.15

AND

supermicro sh7758Match-

Node

supermicro smt_x8_firmwareRange<3.12

AND

supermicro sh7757Match-

Node

citrix netscaler_sdx_firmwareMatch10

AND

citrix netscaler_sdxMatch-

Node

citrix netscaler_firmwareMatch-

AND

citrix netscalerMatch-

Node

citrix netscaler_sd-wan_firmwareMatch-

AND

citrix netscaler_sd-wanMatch-

[
  {
    "product": "IPMI",
    "vendor": "Supermicro",
    "versions": [
      {
        "status": "affected",
        "version": "before SMT_X9_317 and before SMT X8 312"
      }
    ]
  }
]

Source	Link
community	www.community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilities
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/89044
support	www.support.citrix.com/article/CTX216642
supermicro	www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf
support	www.support.citrix.com/article/CTX216642

21 Nov 2024 01:53Current

8High risk

Vulners AI Score8

CVSS 24.3

CVSS 3.18.1

EPSS0.0946

CWE-798