Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-4786
HistoryJul 08, 2013 - 10:55 p.m.

CVE-2013-4786

2013-07-0822:55:01
CWE-255
[email protected]
web.nvd.nist.gov
340
In Wild
40
ipmi 2.0
rmcp+ authenticated key-exchange protocol
rakp
remote attackers
password hashes
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.24 Low

EPSS

Percentile

96.6%

JSON

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.

Affected configurations

NVD
Node
oraclefujitsu_m10_firmwareRange≤2290
Node
intelintelligent_platform_management_interfaceMatch2.0

Social References

More

Related

ubuntucve 1
nvd 1
cvelist 1
prion 1
nessus 1
f5 2
securityvulns 2
attackerkb 1
jvn 1
cert 1
avleonov 1
nvidia 1
oracle 1
ubuntucve
ubuntucve
CVE-2013-4786
2013-07-08 00:00:00
nvd
nvd
CVE-2013-4786
2013-07-08 22:55:01
cvelist
cvelist
CVE-2013-4786
2013-07-08 22:00:00
prion
prion
Authentication flaw
2013-07-08 22:55:00
nessus
nessus
IPMI v2.0 Password Hash Disclosure
2014-12-18 00:00:00
f5
f5
SOL16846 - IPMI vulnerability CVE-2013-4786
2015-07-02 00:00:00
K16846 : IPMI vulnerability CVE-2013-4786
2015-07-02 00:00:00
securityvulns
securityvulns
[security bulletin] HPSBHF02981 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO2, iLO3, iLO4), IPMI 2.0 RCMP+ Authentication Remote Password Hash Vulnerability (RAKP)
2014-04-07 00:00:00
HP Integrated Lights-Out unauthorized access
2014-04-07 00:00:00
attackerkb
attackerkb
CVE-2013-4786
2013-07-08 00:00:00
jvn
jvn
JVN#38752718: Multiple NEC Products vulnerable to authentication bypass
2021-01-04 00:00:00
cert
cert
BMC software fails to validate IPMI session.
2024-04-30 00:00:00
avleonov
avleonov
Is Vulnerability Management more about Vulnerabilities or Management?
2020-02-11 13:46:54
nvidia
nvidia
Security Bulletin: AMI Baseboard Management Controller (BMC) Firmware Vulnerabilities in NVIDIA DGX-1, DGX-2, and DGX A100 Servers - October 2020
2020-10-28 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.24 Low

EPSS

Percentile

96.6%

JSON
Related for CVE-2013-4786
ubuntucve1nvd1cvelist1prion1nessus1f52securityvulns2attackerkb1jvn1cert1avleonov1nvidia1oracle1