CVE-2013-3619

Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.

CVSS v3.1

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

9.69% chance of exploitation in the next 30 days, 95th percentile

Published

2020-01-02

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/smt_ipmi_static_ce…

References

• CVE Record
• NVD entry

Related

• CVE-2013-3617
• CVE-2013-3623
• CVE-2013-3615
• CVE-2013-3628
• CVE-2013-3614
• CVE-2013-3629