CVE-2013-4782

Supermicro BMC - Auth Bypass

Title source: llm
STIX 2.1

Description

The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

Exploits (1)

metasploit SCANNER
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero.rb

References (5)

Core 5
Core References
Various Sources x_refsource_misc
http://www.wired.com/threatlevel/2013/07/ipmi/
Various Sources x_refsource_misc
http://fish2.com/ipmi/cipherzero.html
Various Sources mailing-list x_refsource_mlist
https://lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/show/osvdb/93038

Scores

EPSS 0.6408
EPSS Percentile 98.4%

Details

CWE
CWE-287
Status published
Products (1)
supermicro/bmc
Published Jul 08, 2013
Tracked Since Feb 18, 2026