CVE-2013-3623

🗓️ 10 Dec 2013 16:00:00Reported by certccType

cve

cve🔗 web.nvd.nist.gov👁 63 Views🌐 WEB

Multiple stack-based buffer overflows in IPMI web interfac

Reporter	Title	Published	Views	Family All 14
0day.today	Supermicro Onboard IPMI close_window.cgi Buffer Overflow Vulnerability	17 Nov 201300:00	–	zdt
Circl	CVE-2013-3623	18 Nov 201300:00	–	circl
Check Point Advisories	Supermicro IPMI Firmware CGI Scanner Remote Code Execution (CVE-2013-3621; CVE-2013-3623)	12 Nov 201300:00	–	checkpoint_advisories
Cvelist	CVE-2013-3623	10 Dec 201316:00	–	cvelist
Exploit DB	Supermicro Onboard IPMI - 'close_window.cgi' Remote Buffer Overflow (Metasploit)	18 Nov 201300:00	–	exploitdb
Metasploit	Supermicro Onboard IPMI CGI Vulnerability Scanner	6 Nov 201319:45	–	metasploit
Metasploit	Supermicro Onboard IPMI close_window.cgi Buffer Overflow	7 Nov 201320:59	–	metasploit
NVD	CVE-2013-3623	10 Dec 201316:11	–	nvd
Packet Storm	Supermicro Onboard IPMI close_window.cgi Buffer Overflow	17 Nov 201300:00	–	packetstorm
Packet Storm	Supermicro Onboard IPMI CGI Scanner	1 Sep 202400:00	–	packetstorm

NVD

Node

OR

supermicro intelligent_platform_management_firmwareRange≤2.26----x9_generation_motherboards

supermicro intelligent_platform_management_firmwareMatch2.24----x9_generation_motherboards

Source	Link
exploit-db	www.exploit-db.com/exploits/29666
community	www.community.rapid7.com/community/metasploit/blog/2013/11/06/supermicro-ipmi-firmware-vulnerabilities
securityfocus	www.securityfocus.com/bid/63775
thomas-krenn	www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013
support	www.support.citrix.com/article/CTX216642
supermicro	www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf

Parameter	Position	Path	Description	CWE
name	request body	cgi/login.cgi	CVE-2013-3621: buffer overflow in login.cgi due to unsafe handling, leading to potential code execution.	CWE-119
pwd	request body	cgi/login.cgi	CVE-2013-3621: buffer overflow in login.cgi due to unsafe handling, leading to potential code execution.	CWE-119
sess_sid	header	cgi/close_window.cgi	CVE-2013-3623: buffer overflow in close_window.cgi triggered via User-Agent header overflow with sess_sid parameter.	CWE-119

16 Jun 2026 23:55Current

8.1High risk

Vulners AI Score8.1

CVSS 210

EPSS0.71929

cve-2013-3623 buffer overflow stack-based ipmi remote code execution firmware vulnerability nvd