CVE-2013-4782

The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

26.02% chance of exploitation in the next 30 days, 98th percentile

Published

2013-07-08

Updated

2024-09-16

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero.rb

References

• CVE Record
• NVD entry

Related

• CVE-2013-4777
• CVE-2013-4786
• CVE-2013-4776
• CVE-2013-4787
• CVE-2013-4775
• CVE-2013-4788