CVE-2013-3609

The CVE-2013-3609 issue affects Supermicro IPMI web interfaces (various H8/ X9/X8/X7 series) where client-side JavaScript is used for authorization checks. This reliance on client-side validation may allow remote authenticated users to bypass access restrictions and escalate privileges via crafte...

Supermicro IPMI based on ATEN firmware contain multiple vulnerabilities

Overview Supermicro Intelligent Platform Management Interface IPMI implementations based on ATEN firmware contain multiple vulnerabilities in their web management interface. Description CWE-121: Stack-based Buffer Overflow - CVE-2013-3607The Supermicro IPMI web interface contains multiple buffer...