CVE-2013-4031
IBM BladeCenter, Flex System, System x - Default IPMI Credentials
Title source: llmDescription
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/86172
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463
Scores
EPSS
0.0204
EPSS Percentile
79.2%
Details
CWE
CWE-255
Status
published
Products (34)
ibm/bladecenter
hs22
ibm/bladecenter
hs22v
ibm/bladecenter
hs23
ibm/bladecenter
hs23e
ibm/bladecenter
hx5
ibm/flex_system_x220_compute_node
ibm/flex_system_x240_compute_node
ibm/flex_system_x440_compute_node
ibm/system_x3100_m4
ibm/system_x3200_m3
... and 24 more
Published
Aug 09, 2013
Tracked Since
Feb 18, 2026