CVE-2013-6785

MEDIUM

Supermicro Intelligent Platform Management Interface - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter.

Exploits (1)

metasploit WORKING POC
by hdm, juan vazquez · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/smt_ipmi_url_redirect_traversal.rb

References (2)

Scores

CVSS v3 4.3
EPSS 0.3147
EPSS Percentile 96.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
supermicro/intelligent_platform_management_interface < smt_x9_315
Published Jan 23, 2020
Tracked Since Feb 18, 2026