Exploitation Summary
EIP tracks 3 public exploits for CVE-2013-3623.
PoCs published by Metasploit, hdm, juan vazquez, including Metasploit module auxiliary/scanner/http/smt_ipmi_cgi_scanner.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Supermicro Onboard IPMI's close_window.cgi via a maliciously crafted User-Agent header. It achieves RCE by leveraging a ret2system attack to execute arbitrary commands via the system() function in libc.
Description
Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1) sess_sid or (2) ACT parameter.
Exploits (3)
This Metasploit module exploits a buffer overflow in Supermicro Onboard IPMI's close_window.cgi via a maliciously crafted User-Agent header. It achieves RCE by leveraging a ret2system attack to execute arbitrary commands via the system() function in libc.
This Metasploit module scans for vulnerabilities in Supermicro Onboard IPMI controllers, specifically checking for buffer overflows in login.cgi and close_window.cgi components. It does not exploit the vulnerabilities but confirms their presence by sending crafted requests and analyzing responses.
This Metasploit module exploits a buffer overflow in Supermicro Onboard IPMI's close_window.cgi via a maliciously crafted User-Agent header. It leverages a ret2system technique to execute arbitrary commands, targeting firmware SMT_X9_214.