CVE-2013-3620

🗓️ 02 Jan 2020 17:51:51Reported by certccType

Hardcoded WSMan credentials in IPMI firmware for Supermicro X9 & X8 gen motherboard

Reporter	Title	Published	Views	Family All 5
Circl	CVE-2013-3620	2 Jan 202020:49	–	circl
Cvelist	CVE-2013-3620	2 Jan 202017:51	–	cvelist
EUVD	EUVD-2013-3554	7 Oct 202500:30	–	euvd
NVD	CVE-2013-3620	2 Jan 202018:15	–	nvd
Prion	Hardcoded credentials	2 Jan 202018:15	–	prion

NVD

Node

supermicro smt_x9_firmwareRange<3.15

AND

supermicro sh7758Match-

Node

supermicro smt_x8_firmwareRange<3.12

AND

supermicro sh7757Match-

Node

citrix netscaler_sdx_firmwareMatch10

AND

citrix netscaler_sdxMatch-

Node

citrix netscaler_firmwareMatch-

AND

citrix netscalerMatch-

Node

citrix netscaler_sd-wan_firmwareMatch-

AND

citrix netscaler_sd-wanMatch-

[
  {
    "product": "IPMI",
    "vendor": "Supermicro",
    "versions": [
      {
        "status": "affected",
        "version": "before 3.15 (SMT_X9_315) and before SMT X8 312"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX216642
support	www.support.citrix.com/article/CTX216642
supermicro	www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/89045
community	www.community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilities

21 Nov 2024 01:54Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.01711

CWE-522