VulnerabilityModified
CVE-2013-3620
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
HIGH 7.5EPSS 3.63%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.63%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 3.63% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-522
- Affected
- supermicro/smt x9 firmware · supermicro/smt x8 firmware · citrix/netscaler sdx firmware · citrix/netscaler firmware · citrix/netscaler sd-wan firmware
- Source
- cret@cert.org
References
- http://support.citrix.com/article/CTX216642Third Party Advisory
- https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilitiesThird Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89045Third Party Advisory, VDB Entry
- https://support.citrix.com/article/CTX216642Third Party Advisory
- https://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdfVendor Advisory
- http://support.citrix.com/article/CTX216642Third Party Advisory
- https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilitiesThird Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89045Third Party Advisory, VDB Entry
- https://support.citrix.com/article/CTX216642Third Party Advisory
- https://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdfVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.