Login Request a demo
Unscored severity · published Aug 9, 2013
CVE-2013-4031
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex…
–
CVSS
2%
EPSS
No
On KEV
Description
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BL
Bladecenter · Ibm
hs22; hs22v; hs23; hs23e; hx5 · source: NVD
FS
Flex System X220 Compute Node · Ibm
All versions, or not specified · source: NVD
FS
Flex System X240 Compute Node · Ibm
All versions, or not specified · source: NVD
FS
Flex System X440 Compute Node · Ibm
All versions, or not specified · source: NVD
SX
System X Idataplex Dx360 M2 Server · Ibm
All versions, or not specified · source: NVD
SX
System X Idataplex Dx360 M3 Server · Ibm
All versions, or not specified · source: NVD
SX
System X Idataplex Dx360 M4 Server · Ibm
All versions, or not specified · source: NVD
SX
System X3100 M4 · Ibm
All versions, or not specified · source: NVD
SX
System X3200 M3 · Ibm
All versions, or not specified · source: NVD
SX
System X3250 M3 · Ibm
All versions, or not specified · source: NVD
SX
System X3250 M4 · Ibm
All versions, or not specified · source: NVD
SX
System X3400 M2 · Ibm
All versions, or not specified · source: NVD
Affected product
BL
Bladecenter
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4031
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4031
Vendor Advisory
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/86172
More from Bladecenter
–
CVE-2013-4030
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote…
–
CVE-2013-4038
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3###…
–
CVE-2013-4037
The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2)…
–
CVE-2009-1289
private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles…
–
CVE-2009-1288
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote…