NVD

Id
39374  
Name
CVE-2013-3607  
Description
Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allow remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC), as demonstrated by the (1) username or (2) password field in login.cgi.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-09-07  
Modified Date
2016-11-28  
Seq
2013-3607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
200858 39374 CVE-2013-3607 VU#648646  View
200859 39374 CVE-2013-3607 62094  View
200860 39374 CVE-2013-3607 http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf  View
200861 39374 CVE-2013-3607 http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013  View
200862 39374 CVE-2013-3607 https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22417 JVNDB-2013-003992 複数の Supermicro デバイス製品の IPMI におけるスタックベースのバッファオーバーフローの脆弱性 複数の Supermicro デバイス製品の Intelligent Platform Management Interface (IPMI) が実装する Web インターフェースには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-3607 63549 CVE-2013-3607 39374 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003992.html 2013-08-30 2013-12-26 View