CVE-2013-3619

CVE-2013-3619: vulnerability in Supermicro IPMI

Published · Updated

Follow this CVE+ Monitor IPMI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 9.7%
from disclosure to weaponsame day
Published on NVDJan 2
metasploitNov 6
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.
Affected products
Supermicro · IPMI
Related CVEs — Supermicro IPMI

In the same product, most dangerous first.

CVE-2013-3620—CVE-2013-3620EPSS 3.6%