CVE-2013-3622

Supermicro Intelligent Platform Management Firmware < 3.15 - Authenticated Buffer Overflow via SID Parameter

Title source: llm

Description

Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://support.citrix.com/article/CTX216642

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/64259

Exploit x_refsource_misc

https://community.rapid7.com/community/metasploit/blog/2013/11/06/supermicro-ipmi-firmware-vulnerabilities

Scores

EPSS 0.0541

EPSS Percentile 91.7%

Details

CWE

CWE-119

Status published

Products (2)

supermicro/intelligent_platform_management_firmware 2.24

supermicro/intelligent_platform_management_firmware < 2.26

Published Dec 10, 2013

Tracked Since Feb 18, 2026