CVE-2013-6718

Severity Score

6.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account names and passwords via use of an unspecified interface.

Advanced Management Module (AMM) con firmware 3.64B, 3.64C, y 3.64G para sistemas IBM BladeCenter permite a atacantes remotos descubrir nombres de cuentas y contraseñas a través del uso de una interfaz no especificada.

*Credits: N/A

CVSS Scores

NISTv2 6.4

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-11-08 CVE Reserved
2013-12-01 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-310: Cryptographic Issues

CAPEC

References (5)

URL	Tag	Source
http://osvdb.org/100397	Vdb Entry
http://secunia.com/advisories/55921	Third Party Advisory
http://www.securityfocus.com/bid/64032	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/89174	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_bladecenter_advanced_management_module_account_information_exposure_cve_2013_6718	2017-08-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bbet64b		Affected
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bbet64c		Affected
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bbet64g		Affected
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bpeo64b		Affected
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bpeo64c		Affected
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bpeo64g		Affected
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bpet64b		Affected
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bpet64c		Affected
Ibm Search vendor "Ibm"		Advanced Management Module Firmware Search vendor "Ibm" for product "Advanced Management Module Firmware"				3.64 Search vendor "Ibm" for product "Advanced Management Module Firmware" and version "3.64"		bpet64g		Affected