ByteOS Network

Vulnerability Details :

CVE-2013-3608

Assigner-certcc

Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b

Published At-08 Sep, 2013 | 01:00

Updated At-06 Aug, 2024 | 16:14

The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:certcc

Assigner Org ID:37e5125f-f79b-445b-8fad-9564f167944b

Published At:08 Sep, 2013 | 01:00

Updated At:06 Aug, 2024 | 16:14

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.kb.cert.org/vuls/id/648646	third-party-advisory x_refsource_CERT-VN
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	x_refsource_CONFIRM
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	x_refsource_MISC
http://www.securityfocus.com/bid/62097	vdb-entry x_refsource_BID
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	x_refsource_MISC
https://support.citrix.com/article/CTX216642	x_refsource_CONFIRM

Hyperlink: http://www.kb.cert.org/vuls/id/648646

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf

Resource:

x_refsource_MISC

Hyperlink: http://www.securityfocus.com/bid/62097

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013

Resource:

x_refsource_MISC

Hyperlink: https://support.citrix.com/article/CTX216642

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.kb.cert.org/vuls/id/648646	third-party-advisory x_refsource_CERT-VN x_transferred
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	x_refsource_CONFIRM x_transferred
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	x_refsource_MISC x_transferred
http://www.securityfocus.com/bid/62097	vdb-entry x_refsource_BID x_transferred
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	x_refsource_MISC x_transferred
https://support.citrix.com/article/CTX216642	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/648646

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.securityfocus.com/bid/62097

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.citrix.com/article/CTX216642

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cret@cert.org

Published At:08 Sep, 2013 | 03:17

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

supermicro>>h8dcl-6f>>-

cpe:2.3:h:supermicro:h8dcl-6f:-:*:*:*:*:*:*:*

supermicro>>h8dcl-if>>-

cpe:2.3:h:supermicro:h8dcl-if:-:*:*:*:*:*:*:*

supermicro>>h8dct-hibqf>>-

cpe:2.3:h:supermicro:h8dct-hibqf:-:*:*:*:*:*:*:*

supermicro>>h8dct-hln4f>>-

cpe:2.3:h:supermicro:h8dct-hln4f:-:*:*:*:*:*:*:*

supermicro>>h8dct-ibqf>>-

cpe:2.3:h:supermicro:h8dct-ibqf:-:*:*:*:*:*:*:*

supermicro>>h8dg6-f>>-

cpe:2.3:h:supermicro:h8dg6-f:-:*:*:*:*:*:*:*

supermicro>>h8dgg-qf>>-

cpe:2.3:h:supermicro:h8dgg-qf:-:*:*:*:*:*:*:*

supermicro>>h8dgi-f>>-

cpe:2.3:h:supermicro:h8dgi-f:-:*:*:*:*:*:*:*

supermicro>>h8dgt-hf>>-

cpe:2.3:h:supermicro:h8dgt-hf:-:*:*:*:*:*:*:*

supermicro>>h8dgt-hibqf>>-

cpe:2.3:h:supermicro:h8dgt-hibqf:-:*:*:*:*:*:*:*

supermicro>>h8dgt-hlf>>-

cpe:2.3:h:supermicro:h8dgt-hlf:-:*:*:*:*:*:*:*

supermicro>>h8dgt-hlibqf>>-

cpe:2.3:h:supermicro:h8dgt-hlibqf:-:*:*:*:*:*:*:*

supermicro>>h8dgu-f>>-

cpe:2.3:h:supermicro:h8dgu-f:-:*:*:*:*:*:*:*

supermicro>>h8dgu-ln4f\+>>-

cpe:2.3:h:supermicro:h8dgu-ln4f\+:-:*:*:*:*:*:*:*

supermicro>>h8scm-f>>-

cpe:2.3:h:supermicro:h8scm-f:-:*:*:*:*:*:*:*

supermicro>>h8sgl-f>>-

cpe:2.3:h:supermicro:h8sgl-f:-:*:*:*:*:*:*:*

supermicro>>h8sme-f>>-

cpe:2.3:h:supermicro:h8sme-f:-:*:*:*:*:*:*:*

supermicro>>h8sml-7>>-

cpe:2.3:h:supermicro:h8sml-7:-:*:*:*:*:*:*:*

supermicro>>h8sml-7f>>-

cpe:2.3:h:supermicro:h8sml-7f:-:*:*:*:*:*:*:*

supermicro>>h8sml-i>>-

cpe:2.3:h:supermicro:h8sml-i:-:*:*:*:*:*:*:*

supermicro>>h8sml-if>>-

cpe:2.3:h:supermicro:h8sml-if:-:*:*:*:*:*:*:*

supermicro>>x7spa-hf>>-

cpe:2.3:h:supermicro:x7spa-hf:-:*:*:*:*:*:*:*

supermicro>>x7spa-hf-d525>>-

cpe:2.3:h:supermicro:x7spa-hf-d525:-:*:*:*:*:*:*:*

supermicro>>x7spe-h-d525>>-

cpe:2.3:h:supermicro:x7spe-h-d525:-:*:*:*:*:*:*:*

supermicro>>x7spe-hf>>-

cpe:2.3:h:supermicro:x7spe-hf:-:*:*:*:*:*:*:*

supermicro>>x7spe-hf-d525>>-

cpe:2.3:h:supermicro:x7spe-hf-d525:-:*:*:*:*:*:*:*

supermicro>>x7spt-df-d525>>-

cpe:2.3:h:supermicro:x7spt-df-d525:-:*:*:*:*:*:*:*

supermicro>>x7spt-df-d525\+>>-

cpe:2.3:h:supermicro:x7spt-df-d525\+:-:*:*:*:*:*:*:*

supermicro>>x8dtl-3f>>-

cpe:2.3:h:supermicro:x8dtl-3f:-:*:*:*:*:*:*:*

supermicro>>x8dtl-6f>>-

cpe:2.3:h:supermicro:x8dtl-6f:-:*:*:*:*:*:*:*

supermicro>>x8dtl-if>>-

cpe:2.3:h:supermicro:x8dtl-if:-:*:*:*:*:*:*:*

supermicro>>x8dtn\+-f>>-

cpe:2.3:h:supermicro:x8dtn\+-f:-:*:*:*:*:*:*:*

supermicro>>x8dtn\+-f-lr>>-

cpe:2.3:h:supermicro:x8dtn\+-f-lr:-:*:*:*:*:*:*:*

supermicro>>x8dtu-6f\+>>-

cpe:2.3:h:supermicro:x8dtu-6f\+:-:*:*:*:*:*:*:*

supermicro>>x8dtu-6f\+-lr>>-

cpe:2.3:h:supermicro:x8dtu-6f\+-lr:-:*:*:*:*:*:*:*

supermicro>>x8dtu-6tf\+>>-

cpe:2.3:h:supermicro:x8dtu-6tf\+:-:*:*:*:*:*:*:*

supermicro>>x8dtu-6tf\+-lr>>-

cpe:2.3:h:supermicro:x8dtu-6tf\+-lr:-:*:*:*:*:*:*:*

supermicro>>x8dtu-ln4f\+>>-

cpe:2.3:h:supermicro:x8dtu-ln4f\+:-:*:*:*:*:*:*:*

supermicro>>x8dtu-ln4f\+-lr>>-

cpe:2.3:h:supermicro:x8dtu-ln4f\+-lr:-:*:*:*:*:*:*:*

supermicro>>x8si6-f>>-

cpe:2.3:h:supermicro:x8si6-f:-:*:*:*:*:*:*:*

supermicro>>x8sia-f>>-

cpe:2.3:h:supermicro:x8sia-f:-:*:*:*:*:*:*:*

supermicro>>x8sie-f>>-

cpe:2.3:h:supermicro:x8sie-f:-:*:*:*:*:*:*:*

supermicro>>x8sie-ln4f>>-

cpe:2.3:h:supermicro:x8sie-ln4f:-:*:*:*:*:*:*:*

supermicro>>x8sil-f>>-

cpe:2.3:h:supermicro:x8sil-f:-:*:*:*:*:*:*:*

supermicro>>x8sit-f>>-

cpe:2.3:h:supermicro:x8sit-f:-:*:*:*:*:*:*:*

supermicro>>x8sit-hf>>-

cpe:2.3:h:supermicro:x8sit-hf:-:*:*:*:*:*:*:*

supermicro>>x8siu-f>>-

cpe:2.3:h:supermicro:x8siu-f:-:*:*:*:*:*:*:*

supermicro>>x9dax-7f>>-

cpe:2.3:h:supermicro:x9dax-7f:-:*:*:*:*:*:*:*

supermicro>>x9dax-7f-hft>>-

cpe:2.3:h:supermicro:x9dax-7f-hft:-:*:*:*:*:*:*:*

supermicro>>x9dax-7tf>>-

cpe:2.3:h:supermicro:x9dax-7tf:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.kb.cert.org/vuls/id/648646	cret@cert.org	US Government Resource
http://www.securityfocus.com/bid/62097	cret@cert.org	N/A
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	cret@cert.org	N/A
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	cret@cert.org	N/A
https://support.citrix.com/article/CTX216642	cret@cert.org	N/A
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	cret@cert.org	Exploit
http://www.kb.cert.org/vuls/id/648646	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.securityfocus.com/bid/62097	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	af854a3a-2127-422b-91ae-364da2661108	N/A
https://support.citrix.com/article/CTX216642	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	af854a3a-2127-422b-91ae-364da2661108	Exploit

Hyperlink: http://www.kb.cert.org/vuls/id/648646

Source: cret@cert.org

Resource:

US Government Resource

Hyperlink: http://www.securityfocus.com/bid/62097

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013

Source: cret@cert.org

Resource: N/A

Hyperlink: https://support.citrix.com/article/CTX216642

Source: cret@cert.org

Resource: N/A

Hyperlink: https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf

Source: cret@cert.org

Resource:

Exploit

Hyperlink: http://www.kb.cert.org/vuls/id/648646