CVE-2013-3607

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allow remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC), as demonstrated by the (1) username or (2) password field in login.cgi.

Multiples desbordamientos de buffer basados en pila en la interfaz web de la implementación de Intelligent Platform Management Interface (IPMI) en dispositivos Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, y X9SR* permite a atacantes remotos ejecutar código arbitrario en el Baseboard Management Controller (BMC), como se muestra en el campo de (1) usuario o (2) contraseña en login.cgi.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-05-21 CVE Reserved
2013-09-08 CVE Published
2024-08-06 CVE Updated
2024-08-06 First Exploit
2024-10-02 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (6)

URL	Tag	Source
http://www.kb.cert.org/vuls/id/648646	Third Party Advisory
http://www.securityfocus.com/bid/62094	Vdb Entry
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	X_refsource_confirm
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	X_refsource_misc
https://support.citrix.com/article/CTX216642	X_refsource_confirm

URL	Date	SRC
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	2024-08-06

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Supermicro Search vendor "Supermicro"		H8dcl-6f Search vendor "Supermicro" for product "H8dcl-6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dcl-if Search vendor "Supermicro" for product "H8dcl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-hibqf Search vendor "Supermicro" for product "H8dct-hibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-hln4f Search vendor "Supermicro" for product "H8dct-hln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-ibqf Search vendor "Supermicro" for product "H8dct-ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dg6-f Search vendor "Supermicro" for product "H8dg6-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgg-qf Search vendor "Supermicro" for product "H8dgg-qf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgi-f Search vendor "Supermicro" for product "H8dgi-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hf Search vendor "Supermicro" for product "H8dgt-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hibqf Search vendor "Supermicro" for product "H8dgt-hibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hlf Search vendor "Supermicro" for product "H8dgt-hlf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hlibqf Search vendor "Supermicro" for product "H8dgt-hlibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgu-f Search vendor "Supermicro" for product "H8dgu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgu-ln4f\+ Search vendor "Supermicro" for product "H8dgu-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8scm-f Search vendor "Supermicro" for product "H8scm-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sgl-f Search vendor "Supermicro" for product "H8sgl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sme-f Search vendor "Supermicro" for product "H8sme-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-7 Search vendor "Supermicro" for product "H8sml-7"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-7f Search vendor "Supermicro" for product "H8sml-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-i Search vendor "Supermicro" for product "H8sml-i"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-if Search vendor "Supermicro" for product "H8sml-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spa-hf Search vendor "Supermicro" for product "X7spa-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spa-hf-d525 Search vendor "Supermicro" for product "X7spa-hf-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-h-d525 Search vendor "Supermicro" for product "X7spe-h-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-hf Search vendor "Supermicro" for product "X7spe-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-hf-d525 Search vendor "Supermicro" for product "X7spe-hf-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spt-df-d525 Search vendor "Supermicro" for product "X7spt-df-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spt-df-d525\+ Search vendor "Supermicro" for product "X7spt-df-d525\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-3f Search vendor "Supermicro" for product "X8dtl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-6f Search vendor "Supermicro" for product "X8dtl-6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-if Search vendor "Supermicro" for product "X8dtl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtn\+-f Search vendor "Supermicro" for product "X8dtn\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtn\+-f-lr Search vendor "Supermicro" for product "X8dtn\+-f-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6f\+ Search vendor "Supermicro" for product "X8dtu-6f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6f\+-lr Search vendor "Supermicro" for product "X8dtu-6f\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6tf\+ Search vendor "Supermicro" for product "X8dtu-6tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6tf\+-lr Search vendor "Supermicro" for product "X8dtu-6tf\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-ln4f\+ Search vendor "Supermicro" for product "X8dtu-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-ln4f\+-lr Search vendor "Supermicro" for product "X8dtu-ln4f\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8si6-f Search vendor "Supermicro" for product "X8si6-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sia-f Search vendor "Supermicro" for product "X8sia-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sie-f Search vendor "Supermicro" for product "X8sie-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sie-ln4f Search vendor "Supermicro" for product "X8sie-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sil-f Search vendor "Supermicro" for product "X8sil-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sit-f Search vendor "Supermicro" for product "X8sit-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sit-hf Search vendor "Supermicro" for product "X8sit-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8siu-f Search vendor "Supermicro" for product "X8siu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7f Search vendor "Supermicro" for product "X9dax-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7f-hft Search vendor "Supermicro" for product "X9dax-7f-hft"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7tf Search vendor "Supermicro" for product "X9dax-7tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-if Search vendor "Supermicro" for product "X9dax-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-if-hft Search vendor "Supermicro" for product "X9dax-if-hft"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-itf Search vendor "Supermicro" for product "X9dax-itf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9db3-f Search vendor "Supermicro" for product "X9db3-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9db3-tpf Search vendor "Supermicro" for product "X9db3-tpf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbi-f Search vendor "Supermicro" for product "X9dbi-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbi-tpf Search vendor "Supermicro" for product "X9dbi-tpf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbl-3f Search vendor "Supermicro" for product "X9dbl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbl-if Search vendor "Supermicro" for product "X9dbl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbu-3f Search vendor "Supermicro" for product "X9dbu-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbu-if Search vendor "Supermicro" for product "X9dbu-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr3-f Search vendor "Supermicro" for product "X9dr3-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr3-ln4f\+ Search vendor "Supermicro" for product "X9dr3-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-ln4f Search vendor "Supermicro" for product "X9dr7-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-ln4f-jbod Search vendor "Supermicro" for product "X9dr7-ln4f-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-tf\+ Search vendor "Supermicro" for product "X9dr7-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7jln4f Search vendor "Supermicro" for product "X9drd-7jln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7ln4f Search vendor "Supermicro" for product "X9drd-7ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7ln4f-jbod Search vendor "Supermicro" for product "X9drd-7ln4f-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-ef Search vendor "Supermicro" for product "X9drd-ef"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-if Search vendor "Supermicro" for product "X9drd-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dre-ln4f Search vendor "Supermicro" for product "X9dre-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dre-tf\+ Search vendor "Supermicro" for product "X9dre-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff Search vendor "Supermicro" for product "X9drff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7 Search vendor "Supermicro" for product "X9drff-7"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7\+ Search vendor "Supermicro" for product "X9drff-7\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7g\+ Search vendor "Supermicro" for product "X9drff-7g\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7t\+ Search vendor "Supermicro" for product "X9drff-7t\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7tg\+ Search vendor "Supermicro" for product "X9drff-7tg\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-i\+ Search vendor "Supermicro" for product "X9drff-i\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-ig\+ Search vendor "Supermicro" for product "X9drff-ig\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-it\+ Search vendor "Supermicro" for product "X9drff-it\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-itg\+ Search vendor "Supermicro" for product "X9drff-itg\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drfr Search vendor "Supermicro" for product "X9drfr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-hf Search vendor "Supermicro" for product "X9drg-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-hf\+ Search vendor "Supermicro" for product "X9drg-hf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-htf Search vendor "Supermicro" for product "X9drg-htf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-htf\+ Search vendor "Supermicro" for product "X9drg-htf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-7f Search vendor "Supermicro" for product "X9drh-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-7tf Search vendor "Supermicro" for product "X9drh-7tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-if Search vendor "Supermicro" for product "X9drh-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-itf Search vendor "Supermicro" for product "X9drh-itf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dri-f Search vendor "Supermicro" for product "X9dri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dri-ln4f\+ Search vendor "Supermicro" for product "X9dri-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-3f Search vendor "Supermicro" for product "X9drl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-ef Search vendor "Supermicro" for product "X9drl-ef"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-if Search vendor "Supermicro" for product "X9drl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-f Search vendor "Supermicro" for product "X9drt-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6f Search vendor "Supermicro" for product "X9drt-h6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6ibff Search vendor "Supermicro" for product "X9drt-h6ibff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6ibqf Search vendor "Supermicro" for product "X9drt-h6ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-hf\+ Search vendor "Supermicro" for product "X9drt-hf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-ibff Search vendor "Supermicro" for product "X9drt-ibff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-ibqf Search vendor "Supermicro" for product "X9drt-ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-3ln4f\+ Search vendor "Supermicro" for product "X9drw-3ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-3tf\+ Search vendor "Supermicro" for product "X9drw-3tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-7tpf\+ Search vendor "Supermicro" for product "X9drw-7tpf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-itpf\+ Search vendor "Supermicro" for product "X9drw-itpf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drx\+-f Search vendor "Supermicro" for product "X9drx\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf Search vendor "Supermicro" for product "X9qr7-tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf\+ Search vendor "Supermicro" for product "X9qr7-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf-jbod Search vendor "Supermicro" for product "X9qr7-tf-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qri-f Search vendor "Supermicro" for product "X9qri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qri-f\+ Search vendor "Supermicro" for product "X9qri-f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sbaa-f Search vendor "Supermicro" for product "X9sbaa-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sca-f Search vendor "Supermicro" for product "X9sca-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scd-f Search vendor "Supermicro" for product "X9scd-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sce-f Search vendor "Supermicro" for product "X9sce-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scff-f Search vendor "Supermicro" for product "X9scff-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sci-ln4f Search vendor "Supermicro" for product "X9sci-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scl\+-f Search vendor "Supermicro" for product "X9scl\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scl-f Search vendor "Supermicro" for product "X9scl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scm-f Search vendor "Supermicro" for product "X9scm-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scm-iif Search vendor "Supermicro" for product "X9scm-iif"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9spu-f Search vendor "Supermicro" for product "X9spu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srd-f Search vendor "Supermicro" for product "X9srd-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sre-3f Search vendor "Supermicro" for product "X9sre-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sre-f Search vendor "Supermicro" for product "X9sre-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srg-f Search vendor "Supermicro" for product "X9srg-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sri-3f Search vendor "Supermicro" for product "X9sri-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sri-f Search vendor "Supermicro" for product "X9sri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srl-f Search vendor "Supermicro" for product "X9srl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srw-f Search vendor "Supermicro" for product "X9srw-f"				-		-		Affected