Login Request a demo
Unscored severity · published Aug 9, 2013
CVE-2013-4037
The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2)…
–
CVSS
0.9%
EPSS
No
On KEV
Description
The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BL
Bladecenter · Ibm
hs22; hs22v; hs23; hs23e; hx5 · source: NVD
FS
Flex System X220 Compute Node · Ibm
All versions, or not specified · source: NVD
FS
Flex System X240 Compute Node · Ibm
All versions, or not specified · source: NVD
FS
Flex System X440 Compute Node · Ibm
All versions, or not specified · source: NVD
SX
System X Idataplex Dx360 M2 Server · Ibm
All versions, or not specified · source: NVD
SX
System X Idataplex Dx360 M3 Server · Ibm
All versions, or not specified · source: NVD
SX
System X Idataplex Dx360 M4 Server · Ibm
All versions, or not specified · source: NVD
SX
System X3100 M4 · Ibm
All versions, or not specified · source: NVD
SX
System X3200 M3 · Ibm
All versions, or not specified · source: NVD
SX
System X3250 M3 · Ibm
All versions, or not specified · source: NVD
SX
System X3250 M4 · Ibm
All versions, or not specified · source: NVD
SX
System X3400 M2 · Ibm
All versions, or not specified · source: NVD
Affected product
BL
Bladecenter
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4037
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4037
Vendor Advisory
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/86173
More from Bladecenter
–
CVE-2013-4030
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote…
–
CVE-2013-4038
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3###…
–
CVE-2013-4031
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex…
–
CVE-2009-1289
private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles…
–
CVE-2009-1288
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote…