← back
CVE-2013-4786

CVE-2013-4786

EPSS 81.8%
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
Affected products
n/a · n/a
public PoCs found — 2
githubgithub.com/fin3ss3g0d/CosmicRakp★ 40exploitdbwww.exploit-db.com/exploits/38633unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://fish2.com/ipmi/remote-pw-cracking.htmlhttp://marc.info/?l=bugtraq&m=139653661621384&w=2https://community.rapid7.com/community/metasploit/blog/2013/07/02/a-penetration-testers-guide-to-ipmihttps://nvidia.custhelp.com/app/answers/detail/a_id/5010https://security.netapp.com/advisory/ntap-20190919-0005/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04197764http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html