Lucene search

[email protected]CVE-2013-4031

HistoryAug 09, 2013 - 11:55 p.m.

CVE-2013-4031

2013-08-0923:55:00

CWE-255

[email protected]

web.nvd.nist.gov

ibm

servers

ipmi

default password

vulnerability

remote attack

6.8 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

76.2%

JSON

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.

CPENameOperatorVersion
ibm:system_x3500_m3ibm system x3500 m3eq-
ibm:flex_system_x440_compute_nodeibm flex system x440 compute nodeeq-
ibm:system_x3250_m4ibm system x3250 m4eq-
ibm:system_x3550_m3ibm system x3550 m3eq-
ibm:system_x3400_m2ibm system x3400 m2eq-
ibm:bladecenteribm bladecentereqhs22v
ibm:system_x3550_m2ibm system x3550 m2eq-
ibm:system_x3750_m4ibm system x3750 m4eq-
ibm:system_x3650_m2ibm system x3650 m2eq-
ibm:system_x3200_m3ibm system x3200 m3eq-

CPE	Name	Operator	Version
ibm:system_x3500_m3	ibm system x3500 m3	eq	-
ibm:flex_system_x440_compute_node	ibm flex system x440 compute node	eq	-
ibm:system_x3250_m4	ibm system x3250 m4	eq	-
ibm:system_x3550_m3	ibm system x3550 m3	eq	-
ibm:system_x3400_m2	ibm system x3400 m2	eq	-
ibm:bladecenter	ibm bladecenter	eq	hs22v
ibm:system_x3550_m2	ibm system x3550 m2	eq	-
ibm:system_x3750_m4	ibm system x3750 m4	eq	-
ibm:system_x3650_m2	ibm system x3650 m2	eq	-
ibm:system_x3200_m3	ibm system x3200 m3	eq	-

Rows per page:

1-10 of 341

References

www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463

exchange.xforce.ibmcloud.com/vulnerabilities/86172

6.8 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

76.2%

JSON

Related for CVE-2013-4031

cvelist1 prion1 lenovo2 ibm1