Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4786
HistoryJul 08, 2013 - 10:55 p.m.

CVE-2013-4786

2013-07-0822:55:01
CWE-255
[email protected]
web.nvd.nist.gov
45

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.29

Percentile

96.9%

JSON

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.

Affected configurations

Nvd
Node
oraclefujitsu_m10_firmwareRange≤2290
Node
intelintelligent_platform_management_interfaceMatch2.0
VendorProductVersionCPE
oraclefujitsu_m10_firmware*cpe:2.3:o:oracle:fujitsu_m10_firmware:*:*:*:*:*:*:*:*
intelintelligent_platform_management_interface2.0cpe:2.3:a:intel:intelligent_platform_management_interface:2.0:*:*:*:*:*:*:*

Related

f5 2
ubuntucve 1
attackerkb 1
exploitdb 1
cvelist 1
prion 1
packetstorm 1
nessus 1
cve 1
metasploit 1
securityvulns 2
jvn 1
cert 1
avleonov 1
nvidia 1
oracle 1
f5
f5
K16846 : IPMI vulnerability CVE-2013-4786
2015-07-02 00:00:00
SOL16846 - IPMI vulnerability CVE-2013-4786
2015-07-02 00:00:00
ubuntucve
ubuntucve
CVE-2013-4786
2013-07-08 00:00:00
attackerkb
attackerkb
CVE-2013-4786
2013-07-08 00:00:00
exploitdb
exploitdb
Intelligent Platform Management Interface - Information Disclosure
2013-07-02 00:00:00
cvelist
cvelist
CVE-2013-4786
2013-07-08 22:00:00
prion
prion
Authentication flaw
2013-07-08 22:55:00
packetstorm
packetstorm
IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval
2024-09-01 00:00:00
nessus
nessus
IPMI v2.0 Password Hash Disclosure
2014-12-18 00:00:00
cve
cve
CVE-2013-4786
2013-07-08 22:55:01
metasploit
metasploit
IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval
2013-06-24 19:23:53
securityvulns
securityvulns
HP Integrated Lights-Out unauthorized access
2014-04-07 00:00:00
[security bulletin] HPSBHF02981 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO2, iLO3, iLO4), IPMI 2.0 RCMP+ Authentication Remote Password Hash Vulnerability (RAKP)
2014-04-07 00:00:00
jvn
jvn
JVN#38752718: Multiple NEC Products vulnerable to authentication bypass
2021-01-04 00:00:00
cert
cert
BMC software fails to validate IPMI session.
2024-04-30 00:00:00
avleonov
avleonov
Is Vulnerability Management more about Vulnerabilities or Management?
2020-02-11 13:46:54
nvidia
nvidia
Security Bulletin: AMI Baseboard Management Controller (BMC) Firmware Vulnerabilities in NVIDIA DGX-1, DGX-2, and DGX A100 Servers - October 2020
2020-10-28 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.29

Percentile

96.9%

JSON
Related for NVD:CVE-2013-4786
f52ubuntucve1attackerkb1exploitdb1cvelist1prion1packetstorm1nessus1cve1metasploit1securityvulns2jvn1cert1avleonov1nvidia1oracle1