CVE-2013-3620: vulnerability in Supermicro IPMI
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.6%
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
Affected products
Supermicro · IPMIRelated CVEs — Supermicro IPMI
In the same product, most dangerous first.
References
https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilitieshttps://exchange.xforce.ibmcloud.com/vulnerabilities/89045https://support.citrix.com/article/CTX216642http://support.citrix.com/article/CTX216642https://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf