CVE-2013-4037

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.

El protocolo RAKP soportado en la implementación Intelligent Platform Management Interface (IPMI) en Integrated Management Module (IMM) y Integrated Management Module II (IMM2) en servidores IBM BladeCenter, Flex System, System x iDataPlex, and System x3###, envía una contraseña hash al cliente, lo que hace que sea más fácil para los atacantes remotos obtener acceso a través de un ataque de fuerza bruta.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-06-07 CVE Reserved
2013-08-09 CVE Published
2024-06-29 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/86173	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463	2017-08-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hs22 Search vendor "Ibm" for product "Bladecenter" and version "hs22"		-		Affected
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hs22v Search vendor "Ibm" for product "Bladecenter" and version "hs22v"		-		Affected
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hs23 Search vendor "Ibm" for product "Bladecenter" and version "hs23"		-		Affected
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hs23e Search vendor "Ibm" for product "Bladecenter" and version "hs23e"		-		Affected
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hx5 Search vendor "Ibm" for product "Bladecenter" and version "hx5"		-		Affected
Ibm Search vendor "Ibm"		Flex System X220 Compute Node Search vendor "Ibm" for product "Flex System X220 Compute Node"				-		-		Affected
Ibm Search vendor "Ibm"		Flex System X240 Compute Node Search vendor "Ibm" for product "Flex System X240 Compute Node"				-		-		Affected
Ibm Search vendor "Ibm"		Flex System X440 Compute Node Search vendor "Ibm" for product "Flex System X440 Compute Node"				-		-		Affected
Ibm Search vendor "Ibm"		System X Idataplex Dx360 M2 Server Search vendor "Ibm" for product "System X Idataplex Dx360 M2 Server"				-		-		Affected
Ibm Search vendor "Ibm"		System X Idataplex Dx360 M3 Server Search vendor "Ibm" for product "System X Idataplex Dx360 M3 Server"				-		-		Affected
Ibm Search vendor "Ibm"		System X Idataplex Dx360 M4 Server Search vendor "Ibm" for product "System X Idataplex Dx360 M4 Server"				-		-		Affected
Ibm Search vendor "Ibm"		System X3100 M4 Search vendor "Ibm" for product "System X3100 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3200 M3 Search vendor "Ibm" for product "System X3200 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3250 M3 Search vendor "Ibm" for product "System X3250 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3250 M4 Search vendor "Ibm" for product "System X3250 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3400 M2 Search vendor "Ibm" for product "System X3400 M2"				-		-		Affected
Ibm Search vendor "Ibm"		System X3400 M3 Search vendor "Ibm" for product "System X3400 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3500 M2 Search vendor "Ibm" for product "System X3500 M2"				-		-		Affected
Ibm Search vendor "Ibm"		System X3500 M3 Search vendor "Ibm" for product "System X3500 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3500 M4 Search vendor "Ibm" for product "System X3500 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3530 M4 Search vendor "Ibm" for product "System X3530 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3550 M2 Search vendor "Ibm" for product "System X3550 M2"				-		-		Affected
Ibm Search vendor "Ibm"		System X3550 M3 Search vendor "Ibm" for product "System X3550 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3550 M4 Search vendor "Ibm" for product "System X3550 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3620 M3 Search vendor "Ibm" for product "System X3620 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3630 M3 Search vendor "Ibm" for product "System X3630 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3630 M4 Search vendor "Ibm" for product "System X3630 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3650 M2 Search vendor "Ibm" for product "System X3650 M2"				-		-		Affected
Ibm Search vendor "Ibm"		System X3650 M3 Search vendor "Ibm" for product "System X3650 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3650 M4 Search vendor "Ibm" for product "System X3650 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3690 X5 Search vendor "Ibm" for product "System X3690 X5"				-		-		Affected
Ibm Search vendor "Ibm"		System X3750 M4 Search vendor "Ibm" for product "System X3750 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3850 X5 Search vendor "Ibm" for product "System X3850 X5"				-		-		Affected
Ibm Search vendor "Ibm"		System X3950 X5 Search vendor "Ibm" for product "System X3950 X5"				-		-		Affected