CVE-2013-3609

Severity Score

8.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices relies on JavaScript code on the client for authorization checks, which allows remote authenticated users to bypass intended access restrictions via a crafted request, related to the PrivilegeCallBack function.

La interfaz web en la implementación Intelligent Platform Management Interface (IPMI) en dispositivos Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F y X9SR* confie en el código JavaScript en el cliente para comprobaciones de autorización, lo que permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso a través de una solicitud manipulada, relacionado con la función PrivilegeCallBack.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-05-21 CVE Reserved
2013-09-08 CVE Published
2024-08-06 CVE Updated
2024-08-06 First Exploit
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-20: Improper Input Validation

CAPEC

References (6)

URL	Tag	Source
http://www.kb.cert.org/vuls/id/648646	Third Party Advisory
http://www.securityfocus.com/bid/62098	Vdb Entry
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	X_refsource_confirm
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	X_refsource_misc
https://support.citrix.com/article/CTX216642	X_refsource_confirm

URL	Date	SRC
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	2024-08-06

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Supermicro Search vendor "Supermicro"		H8dcl-6f Search vendor "Supermicro" for product "H8dcl-6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dcl-if Search vendor "Supermicro" for product "H8dcl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-hibqf Search vendor "Supermicro" for product "H8dct-hibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-hln4f Search vendor "Supermicro" for product "H8dct-hln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dct-ibqf Search vendor "Supermicro" for product "H8dct-ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dg6-f Search vendor "Supermicro" for product "H8dg6-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgg-qf Search vendor "Supermicro" for product "H8dgg-qf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgi-f Search vendor "Supermicro" for product "H8dgi-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hf Search vendor "Supermicro" for product "H8dgt-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hibqf Search vendor "Supermicro" for product "H8dgt-hibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hlf Search vendor "Supermicro" for product "H8dgt-hlf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgt-hlibqf Search vendor "Supermicro" for product "H8dgt-hlibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgu-f Search vendor "Supermicro" for product "H8dgu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8dgu-ln4f\+ Search vendor "Supermicro" for product "H8dgu-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8scm-f Search vendor "Supermicro" for product "H8scm-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sgl-f Search vendor "Supermicro" for product "H8sgl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sme-f Search vendor "Supermicro" for product "H8sme-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-7 Search vendor "Supermicro" for product "H8sml-7"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-7f Search vendor "Supermicro" for product "H8sml-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-i Search vendor "Supermicro" for product "H8sml-i"				-		-		Affected
Supermicro Search vendor "Supermicro"		H8sml-if Search vendor "Supermicro" for product "H8sml-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spa-hf Search vendor "Supermicro" for product "X7spa-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spa-hf-d525 Search vendor "Supermicro" for product "X7spa-hf-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-h-d525 Search vendor "Supermicro" for product "X7spe-h-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-hf Search vendor "Supermicro" for product "X7spe-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spe-hf-d525 Search vendor "Supermicro" for product "X7spe-hf-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spt-df-d525 Search vendor "Supermicro" for product "X7spt-df-d525"				-		-		Affected
Supermicro Search vendor "Supermicro"		X7spt-df-d525\+ Search vendor "Supermicro" for product "X7spt-df-d525\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-3f Search vendor "Supermicro" for product "X8dtl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-6f Search vendor "Supermicro" for product "X8dtl-6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtl-if Search vendor "Supermicro" for product "X8dtl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtn\+-f Search vendor "Supermicro" for product "X8dtn\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtn\+-f-lr Search vendor "Supermicro" for product "X8dtn\+-f-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6f\+ Search vendor "Supermicro" for product "X8dtu-6f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6f\+-lr Search vendor "Supermicro" for product "X8dtu-6f\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6tf\+ Search vendor "Supermicro" for product "X8dtu-6tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-6tf\+-lr Search vendor "Supermicro" for product "X8dtu-6tf\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-ln4f\+ Search vendor "Supermicro" for product "X8dtu-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8dtu-ln4f\+-lr Search vendor "Supermicro" for product "X8dtu-ln4f\+-lr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8si6-f Search vendor "Supermicro" for product "X8si6-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sia-f Search vendor "Supermicro" for product "X8sia-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sie-f Search vendor "Supermicro" for product "X8sie-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sie-ln4f Search vendor "Supermicro" for product "X8sie-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sil-f Search vendor "Supermicro" for product "X8sil-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sit-f Search vendor "Supermicro" for product "X8sit-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8sit-hf Search vendor "Supermicro" for product "X8sit-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X8siu-f Search vendor "Supermicro" for product "X8siu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7f Search vendor "Supermicro" for product "X9dax-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7f-hft Search vendor "Supermicro" for product "X9dax-7f-hft"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-7tf Search vendor "Supermicro" for product "X9dax-7tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-if Search vendor "Supermicro" for product "X9dax-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-if-hft Search vendor "Supermicro" for product "X9dax-if-hft"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dax-itf Search vendor "Supermicro" for product "X9dax-itf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9db3-f Search vendor "Supermicro" for product "X9db3-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9db3-tpf Search vendor "Supermicro" for product "X9db3-tpf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbi-f Search vendor "Supermicro" for product "X9dbi-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbi-tpf Search vendor "Supermicro" for product "X9dbi-tpf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbl-3f Search vendor "Supermicro" for product "X9dbl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbl-if Search vendor "Supermicro" for product "X9dbl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbu-3f Search vendor "Supermicro" for product "X9dbu-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dbu-if Search vendor "Supermicro" for product "X9dbu-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr3-f Search vendor "Supermicro" for product "X9dr3-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr3-ln4f\+ Search vendor "Supermicro" for product "X9dr3-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-ln4f Search vendor "Supermicro" for product "X9dr7-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-ln4f-jbod Search vendor "Supermicro" for product "X9dr7-ln4f-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dr7-tf\+ Search vendor "Supermicro" for product "X9dr7-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7jln4f Search vendor "Supermicro" for product "X9drd-7jln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7ln4f Search vendor "Supermicro" for product "X9drd-7ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-7ln4f-jbod Search vendor "Supermicro" for product "X9drd-7ln4f-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-ef Search vendor "Supermicro" for product "X9drd-ef"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drd-if Search vendor "Supermicro" for product "X9drd-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dre-ln4f Search vendor "Supermicro" for product "X9dre-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dre-tf\+ Search vendor "Supermicro" for product "X9dre-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff Search vendor "Supermicro" for product "X9drff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7 Search vendor "Supermicro" for product "X9drff-7"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7\+ Search vendor "Supermicro" for product "X9drff-7\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7g\+ Search vendor "Supermicro" for product "X9drff-7g\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7t\+ Search vendor "Supermicro" for product "X9drff-7t\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-7tg\+ Search vendor "Supermicro" for product "X9drff-7tg\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-i\+ Search vendor "Supermicro" for product "X9drff-i\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-ig\+ Search vendor "Supermicro" for product "X9drff-ig\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-it\+ Search vendor "Supermicro" for product "X9drff-it\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drff-itg\+ Search vendor "Supermicro" for product "X9drff-itg\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drfr Search vendor "Supermicro" for product "X9drfr"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-hf Search vendor "Supermicro" for product "X9drg-hf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-hf\+ Search vendor "Supermicro" for product "X9drg-hf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-htf Search vendor "Supermicro" for product "X9drg-htf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drg-htf\+ Search vendor "Supermicro" for product "X9drg-htf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-7f Search vendor "Supermicro" for product "X9drh-7f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-7tf Search vendor "Supermicro" for product "X9drh-7tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-if Search vendor "Supermicro" for product "X9drh-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drh-itf Search vendor "Supermicro" for product "X9drh-itf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dri-f Search vendor "Supermicro" for product "X9dri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9dri-ln4f\+ Search vendor "Supermicro" for product "X9dri-ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-3f Search vendor "Supermicro" for product "X9drl-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-ef Search vendor "Supermicro" for product "X9drl-ef"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drl-if Search vendor "Supermicro" for product "X9drl-if"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-f Search vendor "Supermicro" for product "X9drt-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6f Search vendor "Supermicro" for product "X9drt-h6f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6ibff Search vendor "Supermicro" for product "X9drt-h6ibff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-h6ibqf Search vendor "Supermicro" for product "X9drt-h6ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-hf\+ Search vendor "Supermicro" for product "X9drt-hf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-ibff Search vendor "Supermicro" for product "X9drt-ibff"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drt-ibqf Search vendor "Supermicro" for product "X9drt-ibqf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-3ln4f\+ Search vendor "Supermicro" for product "X9drw-3ln4f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-3tf\+ Search vendor "Supermicro" for product "X9drw-3tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-7tpf\+ Search vendor "Supermicro" for product "X9drw-7tpf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drw-itpf\+ Search vendor "Supermicro" for product "X9drw-itpf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9drx\+-f Search vendor "Supermicro" for product "X9drx\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf Search vendor "Supermicro" for product "X9qr7-tf"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf\+ Search vendor "Supermicro" for product "X9qr7-tf\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qr7-tf-jbod Search vendor "Supermicro" for product "X9qr7-tf-jbod"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qri-f Search vendor "Supermicro" for product "X9qri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9qri-f\+ Search vendor "Supermicro" for product "X9qri-f\+"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sbaa-f Search vendor "Supermicro" for product "X9sbaa-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sca-f Search vendor "Supermicro" for product "X9sca-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scd-f Search vendor "Supermicro" for product "X9scd-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sce-f Search vendor "Supermicro" for product "X9sce-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scff-f Search vendor "Supermicro" for product "X9scff-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sci-ln4f Search vendor "Supermicro" for product "X9sci-ln4f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scl\+-f Search vendor "Supermicro" for product "X9scl\+-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scl-f Search vendor "Supermicro" for product "X9scl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scm-f Search vendor "Supermicro" for product "X9scm-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9scm-iif Search vendor "Supermicro" for product "X9scm-iif"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9spu-f Search vendor "Supermicro" for product "X9spu-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srd-f Search vendor "Supermicro" for product "X9srd-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sre-3f Search vendor "Supermicro" for product "X9sre-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sre-f Search vendor "Supermicro" for product "X9sre-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srg-f Search vendor "Supermicro" for product "X9srg-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sri-3f Search vendor "Supermicro" for product "X9sri-3f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9sri-f Search vendor "Supermicro" for product "X9sri-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srl-f Search vendor "Supermicro" for product "X9srl-f"				-		-		Affected
Supermicro Search vendor "Supermicro"		X9srw-f Search vendor "Supermicro" for product "X9srw-f"				-		-		Affected