Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4786
HistoryJul 08, 2013 - 10:55 p.m.

CVE-2013-4786

2013-07-0822:55:01
CWE-255
[email protected]
web.nvd.nist.gov
7

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.24 Low

EPSS

Percentile

96.6%

JSON

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.

Affected configurations

NVD
Node
oraclefujitsu_m10_firmwareRange≤2290
Node
intelintelligent_platform_management_interfaceMatch2.0

Related

ubuntucve 1
f5 2
cve 1
prion 1
cvelist 1
nessus 1
attackerkb 1
securityvulns 2
jvn 1
cert 1
avleonov 1
nvidia 1
oracle 1
ubuntucve
ubuntucve
CVE-2013-4786
2013-07-08 00:00:00
f5
f5
K16846 : IPMI vulnerability CVE-2013-4786
2015-07-02 00:00:00
SOL16846 - IPMI vulnerability CVE-2013-4786
2015-07-02 00:00:00
cve
cve
CVE-2013-4786
2013-07-08 22:55:01
prion
prion
Authentication flaw
2013-07-08 22:55:00
cvelist
cvelist
CVE-2013-4786
2013-07-08 22:00:00
nessus
nessus
IPMI v2.0 Password Hash Disclosure
2014-12-18 00:00:00
attackerkb
attackerkb
CVE-2013-4786
2013-07-08 00:00:00
securityvulns
securityvulns
HP Integrated Lights-Out unauthorized access
2014-04-07 00:00:00
[security bulletin] HPSBHF02981 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO2, iLO3, iLO4), IPMI 2.0 RCMP+ Authentication Remote Password Hash Vulnerability (RAKP)
2014-04-07 00:00:00
jvn
jvn
JVN#38752718: Multiple NEC Products vulnerable to authentication bypass
2021-01-04 00:00:00
cert
cert
BMC software fails to validate IPMI session.
2024-04-30 00:00:00
avleonov
avleonov
Is Vulnerability Management more about Vulnerabilities or Management?
2020-02-11 13:46:54
nvidia
nvidia
Security Bulletin: AMI Baseboard Management Controller (BMC) Firmware Vulnerabilities in NVIDIA DGX-1, DGX-2, and DGX A100 Servers - October 2020
2020-10-28 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.24 Low

EPSS

Percentile

96.6%

JSON
Related for NVD:CVE-2013-4786
ubuntucve1f52cve1prion1cvelist1nessus1attackerkb1securityvulns2jvn1cert1avleonov1nvidia1oracle1