← back
CVE-2013-3623

CVE-2013-3623

EPSS 71.9%
Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1) sess_sid or (2) ACT parameter.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/29666unverifiedexploitdbwww.exploit-db.com/exploits/29666unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://community.rapid7.com/community/metasploit/blog/2013/11/06/supermicro-ipmi-firmware-vulnerabilitieshttps://support.citrix.com/article/CTX216642http://www.exploit-db.com/exploits/29666http://www.securityfocus.com/bid/63775http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdfhttp://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013