ByteOS Network

CVE-2013-3607

Assigner-CERT/CC

View Details

Assigner-CERT/CC

CVSS Score-10||HIGH

EPSS-14.62% / 94.65%

||

7 Day CHG~0.00%

Published-08 Sep, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allow remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC), as demonstrated by the (1) username or (2) password field in login.cgi.

Vendor-supermicro n/a

Product-x9dr3-ln4f\+x9drh-7tf x8dtu-6tf\+x9dr7-ln4f-jbod x8dtl-3f x9dr7-ln4f x9drw-3ln4f\+h8sml-i x9drff-7 x9scm-f x8siu-f x8sit-f x8dtl-if x9drl-if x9qr7-tf-jbod x9sca-f x9dax-if-hft x9drff-i\+x9dr7-tf\+x9sci-ln4f x9scm-iif x7spa-hf-d525 x8dtu-6f\+x9scl\+-f x9drd-7jln4f x8sit-hf h8dgg-qf x9drt-ibqf x8sie-f x9dax-if h8sme-f x9dax-7f-hft x9drd-7ln4f x9dre-ln4f x9drl-3f x9drff-7tg\+x9drg-htf\+h8dct-hibqf x9drh-itf h8dgu-ln4f\+x9dbl-if x9drt-h6ibqf x9dax-7tf x7spa-hf x8dtu-ln4f\+x9dbi-tpf x8dtu-6tf\+-lr h8dct-ibqf x9srl-f x9drl-ef x9drt-ibff x8dtn\+-f x9sbaa-f x8dtu-ln4f\+-lr x8sie-ln4f x9srg-f h8sml-if x9dax-7f x9drg-hf\+x9dbl-3f x9drfr h8dcl-6f x9dr3-f x9dbu-if x9drff-ig\+x9sri-3f x9drt-f x9drw-7tpf\+x9sri-f x9drff-7g\+x9scff-f h8sgl-f h8dgt-hlf x9db3-tpf x9srw-f x9sre-3f x8sia-f x9drd-ef x9dri-f x8si6-f x9drff x9sre-f x7spe-hf-d525 x9drt-hf\+h8dg6-f h8scm-f x9db3-f h8dgt-hf x8dtn\+-f-lr x9drh-if x7spt-df-d525\+x9drg-hf x9drff-it\+x9scl-f x7spt-df-d525 x9spu-f x9drg-htf h8dct-hln4f x9drw-itpf\+h8dgu-f x9dbi-f x9dri-ln4f\+x9drff-7\+h8sml-7 x9dre-tf\+x8dtl-6f x9drff-7t\+x9srd-f x8sil-f x9qr7-tf\+x7spe-h-d525 x9drff-itg\+x8dtu-6f\+-lr h8dgi-f x9qri-f h8dgt-hibqf x9qr7-tf x9drh-7f x9scd-f x9drd-if h8dgt-hlibqf x9drt-h6ibff x9drd-7ln4f-jbod x9sce-f x9qri-f\+h8dcl-if x9dbu-3f x9drw-3tf\+h8sml-7f x7spe-hf x9drx\+-f x9dax-itf x9drt-h6f n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3608

Assigner-CERT/CC

View Details

Assigner-CERT/CC

CVSS Score-10||HIGH

EPSS-1.89% / 83.67%

||

7 Day CHG~0.00%

Published-08 Sep, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.

Vendor-supermicro n/a

Product-x9dr3-ln4f\+x9drh-7tf x8dtu-6tf\+x9dr7-ln4f-jbod x8dtl-3f x9dr7-ln4f x9drw-3ln4f\+h8sml-i x9drff-7 x9scm-f x8siu-f x8sit-f x8dtl-if x9drl-if x9qr7-tf-jbod x9sca-f x9dax-if-hft x9drff-i\+x9dr7-tf\+x9sci-ln4f x9scm-iif x7spa-hf-d525 x8dtu-6f\+x9scl\+-f x9drd-7jln4f x8sit-hf h8dgg-qf x9drt-ibqf x8sie-f x9dax-if h8sme-f x9dax-7f-hft x9drd-7ln4f x9dre-ln4f x9drl-3f x9drff-7tg\+x9drg-htf\+h8dct-hibqf x9drh-itf h8dgu-ln4f\+x9dbl-if x9drt-h6ibqf x9dax-7tf x7spa-hf x8dtu-ln4f\+x9dbi-tpf x8dtu-6tf\+-lr h8dct-ibqf x9srl-f x9drl-ef x9drt-ibff x8dtn\+-f x9sbaa-f x8dtu-ln4f\+-lr x8sie-ln4f x9srg-f h8sml-if x9dax-7f x9drg-hf\+x9dbl-3f x9drfr h8dcl-6f x9dr3-f x9dbu-if x9drff-ig\+x9sri-3f x9drt-f x9drw-7tpf\+x9sri-f x9drff-7g\+x9scff-f h8sgl-f h8dgt-hlf x9db3-tpf x9srw-f x9sre-3f x8sia-f x9drd-ef x9dri-f x8si6-f x9drff x9sre-f x7spe-hf-d525 x9drt-hf\+h8dg6-f h8scm-f x9db3-f h8dgt-hf x8dtn\+-f-lr x9drh-if x7spt-df-d525\+x9drg-hf x9drff-it\+x9scl-f x7spt-df-d525 x9spu-f x9drg-htf h8dct-hln4f x9drw-itpf\+h8dgu-f x9dbi-f x9dri-ln4f\+x9drff-7\+h8sml-7 x9dre-tf\+x8dtl-6f x9drff-7t\+x9srd-f x8sil-f x9qr7-tf\+x7spe-h-d525 x9drff-itg\+x8dtu-6f\+-lr h8dgi-f x9qri-f h8dgt-hibqf x9qr7-tf x9drh-7f x9scd-f x9drd-if h8dgt-hlibqf x9drt-h6ibff x9drd-7ln4f-jbod x9sce-f x9qri-f\+h8dcl-if x9dbu-3f x9drw-3tf\+h8sml-7f x7spe-hf x9drx\+-f x9dax-itf x9drt-h6f n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-3609

Assigner-CERT/CC

View Details

Assigner-CERT/CC

CVSS Score-10||HIGH

EPSS-1.59% / 82.15%

||

7 Day CHG~0.00%

Published-08 Sep, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices relies on JavaScript code on the client for authorization checks, which allows remote authenticated users to bypass intended access restrictions via a crafted request, related to the PrivilegeCallBack function.

Vendor-supermicro n/a

Product-x9dr3-ln4f\+x9drh-7tf x8dtu-6tf\+x9dr7-ln4f-jbod x8dtl-3f x9dr7-ln4f x9drw-3ln4f\+h8sml-i x9drff-7 x9scm-f x8siu-f x8sit-f x8dtl-if x9drl-if x9qr7-tf-jbod x9sca-f x9dax-if-hft x9drff-i\+x9dr7-tf\+x9sci-ln4f x9scm-iif x7spa-hf-d525 x8dtu-6f\+x9scl\+-f x9drd-7jln4f x8sit-hf h8dgg-qf x9drt-ibqf x8sie-f x9dax-if h8sme-f x9dax-7f-hft x9drd-7ln4f x9dre-ln4f x9drl-3f x9drff-7tg\+x9drg-htf\+h8dct-hibqf x9drh-itf h8dgu-ln4f\+x9dbl-if x9drt-h6ibqf x9dax-7tf x7spa-hf x8dtu-ln4f\+x9dbi-tpf x8dtu-6tf\+-lr h8dct-ibqf x9srl-f x9drl-ef x9drt-ibff x8dtn\+-f x9sbaa-f x8dtu-ln4f\+-lr x8sie-ln4f x9srg-f h8sml-if x9dax-7f x9drg-hf\+x9dbl-3f x9drfr h8dcl-6f x9dr3-f x9dbu-if x9drff-ig\+x9sri-3f x9drt-f x9drw-7tpf\+x9sri-f x9drff-7g\+x9scff-f h8sgl-f h8dgt-hlf x9db3-tpf x9srw-f x9sre-3f x8sia-f x9drd-ef x9dri-f x8si6-f x9drff x9sre-f x7spe-hf-d525 x9drt-hf\+h8dg6-f h8scm-f x9db3-f h8dgt-hf x8dtn\+-f-lr x9drh-if x7spt-df-d525\+x9drg-hf x9drff-it\+x9scl-f x7spt-df-d525 x9spu-f x9drg-htf h8dct-hln4f x9drw-itpf\+h8dgu-f x9dbi-f x9dri-ln4f\+x9drff-7\+h8sml-7 x9dre-tf\+x8dtl-6f x9drff-7t\+x9srd-f x8sil-f x9qr7-tf\+x7spe-h-d525 x9drff-itg\+x8dtu-6f\+-lr h8dgi-f x9qri-f h8dgt-hibqf x9qr7-tf x9drh-7f x9scd-f x9drd-if h8dgt-hlibqf x9drt-h6ibff x9drd-7ln4f-jbod x9sce-f x9qri-f\+h8dcl-if x9dbu-3f x9drw-3tf\+h8sml-7f x7spe-hf x9drx\+-f x9dax-itf x9drt-h6f n/a

CWE ID-CWE-20

Improper Input Validation

x9sre-3f

Source -

CNA CVEs -

ADP CVEs -

CISA CVEs -

NVD CVEs -