Vulnerability Name:

CVE-2013-3622

Assigned:2013-05-21
Published:2013-12-10
Updated:2017-11-14
Summary:Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter.
CVSS v3 Severity:9.0 Critical (CCN CVSS v3 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:9.0 High (CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)
6.7 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
6.0 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P)
4.4 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-119
References:Source: BID
Type: UNKNOWN
64259

Source: MISC
Type: UNKNOWN
https://community.rapid7.com/community/metasploit/blog/2013/11/06/supermicro-ipmi-firmware-vulnerabilities

Source: XF
Type: UNKNOWN
supermicro-onboard-cve20133622-bo(89048)

Source: CONFIRM
Type: UNKNOWN
https://support.citrix.com/article/CTX216642

Vulnerable Configuration:Configuration 1:
  • cpe:/o:supermicro:intelligent_platform_management_firmware:2.24:-:~-~-~-~x9_generation_motherboards~:*:*:*:*:*
  • OR cpe:/o:supermicro:intelligent_platform_management_firmware:2.26:-:~-~-~-~x9_generation_motherboards~:*:*:*:*:*

  • Denotes that component is vulnerable
    BACK
    supermicro intelligent_platform_management_firmware 2.24 -
    supermicro intelligent_platform_management_firmware 2.26 -