CVE-2013-3608

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.

La interfaz web en la implementación Intelligent Platform Management Interface (IPMI) en dispositivos Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F y X9SR* permite a usuarios remotos autenticados ejecutar comandos arbitrarios a través de metacaracteres de shell, según lo demostrado por el campo de dirección IP en config_date_time.cgi.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-05-21 CVE Reserved
2013-09-08 CVE Published
2024-03-26 EPSS Updated
2024-08-06 CVE Updated
2024-08-06 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-20: Improper Input Validation

CAPEC

References (6)

URL	Tag	Source
http://www.kb.cert.org/vuls/id/648646	Third Party Advisory
http://www.securityfocus.com/bid/62097	Vdb Entry
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	X_refsource_confirm
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	X_refsource_misc
https://support.citrix.com/article/CTX216642	X_refsource_confirm

URL	Date	SRC
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	2024-08-06

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Supermicro Search vendor "Supermicro"		H8dcl-6f Search vendor "Supermicro" for product "H8dcl-6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dcl-if Search vendor "Supermicro" for product "H8dcl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-hibqf Search vendor "Supermicro" for product "H8dct-hibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-hln4f Search vendor "Supermicro" for product "H8dct-hln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-ibqf Search vendor "Supermicro" for product "H8dct-ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dg6-f Search vendor "Supermicro" for product "H8dg6-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgg-qf Search vendor "Supermicro" for product "H8dgg-qf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgi-f Search vendor "Supermicro" for product "H8dgi-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hf Search vendor "Supermicro" for product "H8dgt-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hibqf Search vendor "Supermicro" for product "H8dgt-hibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hlf Search vendor "Supermicro" for product "H8dgt-hlf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hlibqf Search vendor "Supermicro" for product "H8dgt-hlibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgu-f Search vendor "Supermicro" for product "H8dgu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgu-ln4f\+ Search vendor "Supermicro" for product "H8dgu-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8scm-f Search vendor "Supermicro" for product "H8scm-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sgl-f Search vendor "Supermicro" for product "H8sgl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sme-f Search vendor "Supermicro" for product "H8sme-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-7 Search vendor "Supermicro" for product "H8sml-7"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-7f Search vendor "Supermicro" for product "H8sml-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-i Search vendor "Supermicro" for product "H8sml-i"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-if Search vendor "Supermicro" for product "H8sml-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spa-hf Search vendor "Supermicro" for product "X7spa-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spa-hf-d525 Search vendor "Supermicro" for product "X7spa-hf-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-h-d525 Search vendor "Supermicro" for product "X7spe-h-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-hf Search vendor "Supermicro" for product "X7spe-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-hf-d525 Search vendor "Supermicro" for product "X7spe-hf-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spt-df-d525 Search vendor "Supermicro" for product "X7spt-df-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spt-df-d525\+ Search vendor "Supermicro" for product "X7spt-df-d525\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-3f Search vendor "Supermicro" for product "X8dtl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-6f Search vendor "Supermicro" for product "X8dtl-6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-if Search vendor "Supermicro" for product "X8dtl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtn\+-f Search vendor "Supermicro" for product "X8dtn\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtn\+-f-lr Search vendor "Supermicro" for product "X8dtn\+-f-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6f\+ Search vendor "Supermicro" for product "X8dtu-6f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6f\+-lr Search vendor "Supermicro" for product "X8dtu-6f\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6tf\+ Search vendor "Supermicro" for product "X8dtu-6tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6tf\+-lr Search vendor "Supermicro" for product "X8dtu-6tf\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-ln4f\+ Search vendor "Supermicro" for product "X8dtu-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-ln4f\+-lr Search vendor "Supermicro" for product "X8dtu-ln4f\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8si6-f Search vendor "Supermicro" for product "X8si6-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sia-f Search vendor "Supermicro" for product "X8sia-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sie-f Search vendor "Supermicro" for product "X8sie-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sie-ln4f Search vendor "Supermicro" for product "X8sie-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sil-f Search vendor "Supermicro" for product "X8sil-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sit-f Search vendor "Supermicro" for product "X8sit-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sit-hf Search vendor "Supermicro" for product "X8sit-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8siu-f Search vendor "Supermicro" for product "X8siu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7f Search vendor "Supermicro" for product "X9dax-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7f-hft Search vendor "Supermicro" for product "X9dax-7f-hft"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7tf Search vendor "Supermicro" for product "X9dax-7tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-if Search vendor "Supermicro" for product "X9dax-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-if-hft Search vendor "Supermicro" for product "X9dax-if-hft"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-itf Search vendor "Supermicro" for product "X9dax-itf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9db3-f Search vendor "Supermicro" for product "X9db3-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9db3-tpf Search vendor "Supermicro" for product "X9db3-tpf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbi-f Search vendor "Supermicro" for product "X9dbi-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbi-tpf Search vendor "Supermicro" for product "X9dbi-tpf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbl-3f Search vendor "Supermicro" for product "X9dbl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbl-if Search vendor "Supermicro" for product "X9dbl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbu-3f Search vendor "Supermicro" for product "X9dbu-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbu-if Search vendor "Supermicro" for product "X9dbu-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr3-f Search vendor "Supermicro" for product "X9dr3-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr3-ln4f\+ Search vendor "Supermicro" for product "X9dr3-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-ln4f Search vendor "Supermicro" for product "X9dr7-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-ln4f-jbod Search vendor "Supermicro" for product "X9dr7-ln4f-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-tf\+ Search vendor "Supermicro" for product "X9dr7-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7jln4f Search vendor "Supermicro" for product "X9drd-7jln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7ln4f Search vendor "Supermicro" for product "X9drd-7ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7ln4f-jbod Search vendor "Supermicro" for product "X9drd-7ln4f-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-ef Search vendor "Supermicro" for product "X9drd-ef"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-if Search vendor "Supermicro" for product "X9drd-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dre-ln4f Search vendor "Supermicro" for product "X9dre-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dre-tf\+ Search vendor "Supermicro" for product "X9dre-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff Search vendor "Supermicro" for product "X9drff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7 Search vendor "Supermicro" for product "X9drff-7"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7\+ Search vendor "Supermicro" for product "X9drff-7\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7g\+ Search vendor "Supermicro" for product "X9drff-7g\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7t\+ Search vendor "Supermicro" for product "X9drff-7t\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7tg\+ Search vendor "Supermicro" for product "X9drff-7tg\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-i\+ Search vendor "Supermicro" for product "X9drff-i\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-ig\+ Search vendor "Supermicro" for product "X9drff-ig\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-it\+ Search vendor "Supermicro" for product "X9drff-it\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-itg\+ Search vendor "Supermicro" for product "X9drff-itg\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drfr Search vendor "Supermicro" for product "X9drfr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-hf Search vendor "Supermicro" for product "X9drg-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-hf\+ Search vendor "Supermicro" for product "X9drg-hf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-htf Search vendor "Supermicro" for product "X9drg-htf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-htf\+ Search vendor "Supermicro" for product "X9drg-htf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-7f Search vendor "Supermicro" for product "X9drh-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-7tf Search vendor "Supermicro" for product "X9drh-7tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-if Search vendor "Supermicro" for product "X9drh-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-itf Search vendor "Supermicro" for product "X9drh-itf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dri-f Search vendor "Supermicro" for product "X9dri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dri-ln4f\+ Search vendor "Supermicro" for product "X9dri-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-3f Search vendor "Supermicro" for product "X9drl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-ef Search vendor "Supermicro" for product "X9drl-ef"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-if Search vendor "Supermicro" for product "X9drl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-f Search vendor "Supermicro" for product "X9drt-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6f Search vendor "Supermicro" for product "X9drt-h6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6ibff Search vendor "Supermicro" for product "X9drt-h6ibff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6ibqf Search vendor "Supermicro" for product "X9drt-h6ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-hf\+ Search vendor "Supermicro" for product "X9drt-hf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-ibff Search vendor "Supermicro" for product "X9drt-ibff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-ibqf Search vendor "Supermicro" for product "X9drt-ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-3ln4f\+ Search vendor "Supermicro" for product "X9drw-3ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-3tf\+ Search vendor "Supermicro" for product "X9drw-3tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-7tpf\+ Search vendor "Supermicro" for product "X9drw-7tpf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-itpf\+ Search vendor "Supermicro" for product "X9drw-itpf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drx\+-f Search vendor "Supermicro" for product "X9drx\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf Search vendor "Supermicro" for product "X9qr7-tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf\+ Search vendor "Supermicro" for product "X9qr7-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf-jbod Search vendor "Supermicro" for product "X9qr7-tf-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qri-f Search vendor "Supermicro" for product "X9qri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qri-f\+ Search vendor "Supermicro" for product "X9qri-f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sbaa-f Search vendor "Supermicro" for product "X9sbaa-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sca-f Search vendor "Supermicro" for product "X9sca-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scd-f Search vendor "Supermicro" for product "X9scd-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sce-f Search vendor "Supermicro" for product "X9sce-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scff-f Search vendor "Supermicro" for product "X9scff-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sci-ln4f Search vendor "Supermicro" for product "X9sci-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scl\+-f Search vendor "Supermicro" for product "X9scl\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scl-f Search vendor "Supermicro" for product "X9scl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scm-f Search vendor "Supermicro" for product "X9scm-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scm-iif Search vendor "Supermicro" for product "X9scm-iif"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9spu-f Search vendor "Supermicro" for product "X9spu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srd-f Search vendor "Supermicro" for product "X9srd-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sre-3f Search vendor "Supermicro" for product "X9sre-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sre-f Search vendor "Supermicro" for product "X9sre-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srg-f Search vendor "Supermicro" for product "X9srg-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sri-3f Search vendor "Supermicro" for product "X9sri-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sri-f Search vendor "Supermicro" for product "X9sri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srl-f Search vendor "Supermicro" for product "X9srl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srw-f Search vendor "Supermicro" for product "X9srw-f"				-		-		Affected