CVE-2013-3623

This Metasploit module exploits a buffer overflow in Supermicro Onboard IPMI's close_window.cgi via a maliciously crafted User-Agent header. It achieves RCE by leveraging a ret2system attack to execute arbitrary commands via the system() function in libc.

This Metasploit module scans for vulnerabilities in Supermicro Onboard IPMI controllers, specifically checking for buffer overflows in login.cgi and close_window.cgi components. It does not exploit the vulnerabilities but confirms their presence by sending crafted requests and analyzing responses.

This Metasploit module exploits a buffer overflow in Supermicro Onboard IPMI's close_window.cgi via a maliciously crafted User-Agent header. It leverages a ret2system technique to execute arbitrary commands, targeting firmware SMT_X9_214.