NVD

Id
40313  
Name
CVE-2013-4783  
Description
The Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with firmware before 1.23.23, allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password. NOTE: the vendor disputes the significance of this issue, stating "DRAC"s are intended to be on a separate management network; they are not designed nor intended to be placed on or connected to the Internet."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-08  
Modified Date
2013-09-26  
Seq
2013-4783  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204860 40313 CVE-2013-4783 ftp://ftp.dell.com/Manuals/Common/integrated-dell-remote-access-cntrllr-6-for-monolithic-srvr-v1.95_FAQ2_en-us.pdf  View
204861 40313 CVE-2013-4783 http://en.community.dell.com/techcenter/systems-management/w/wiki/4929.how-to-check-if-ipmi-cipher-0-is-off.aspx  View
204862 40313 CVE-2013-4783 http://fish2.com/ipmi/cipherzero.html  View
204863 40313 CVE-2013-4783 http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero  View
204864 40313 CVE-2013-4783 http://www.wired.com/threatlevel/2013/07/ipmi/  View
204865 40313 CVE-2013-4783 [Freeipmi-devel] 20130222 The Infamous Cipher Zero, I presume?  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21674 JVNDB-2013-003249 Dell iDRAC の BMC の実装における認証を回避される脆弱性 Dell iDRAC の BMC の実装には、認証を回避される、および任意の IPMI コマンドを実行される脆弱性が存在します。 CVE-2013-4783 64725 CVE-2013-4783 40313 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003249.html 2013-07-08 2013-10-28 View