CVE-2013-3607 Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8S...
HighCVSS 10.0
EPSS 9.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-, X9DB, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allow remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC), as demonstrated by the (1) username or (2) password field in login.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| supermicro h8dcl-6f | All versions | No fix listed |
| supermicro h8dcl-if | All versions | No fix listed |
| supermicro h8dct-hibqf | All versions | No fix listed |
| supermicro h8dct-hln4f | All versions | No fix listed |
| supermicro h8dct-ibqf | All versions | No fix listed |
| supermicro h8dg6-f | All versions | No fix listed |
| supermicro h8dgg-qf | All versions | No fix listed |
| supermicro h8dgi-f | All versions | No fix listed |
| supermicro h8dgt-hf | All versions | No fix listed |
| supermicro h8dgt-hibqf | All versions | No fix listed |
| supermicro h8dgt-hlf | All versions | No fix listed |
| supermicro h8dgt-hlibqf | All versions | No fix listed |
| supermicro h8dgu-f | All versions | No fix listed |
| supermicro h8dgu-ln4f+ | All versions | No fix listed |
| supermicro h8scm-f | All versions | No fix listed |
| supermicro h8sgl-f | All versions | No fix listed |
| supermicro h8sme-f | All versions | No fix listed |
| supermicro h8sml-7 | All versions | No fix listed |
| supermicro h8sml-7f | All versions | No fix listed |
| supermicro h8sml-i | All versions | No fix listed |
| supermicro h8sml-if | All versions | No fix listed |
| supermicro x7spa-hf | All versions | No fix listed |
| supermicro x7spa-hf-d525 | All versions | No fix listed |
| supermicro x7spe-h-d525 | All versions | No fix listed |
| supermicro x7spe-hf | All versions | No fix listed |
Show 108 more
| Product | Affected versions | Fixed in |
|---|---|---|
| supermicro x7spe-hf-d525 | All versions | No fix listed |
| supermicro x7spt-df-d525 | All versions | No fix listed |
| supermicro x7spt-df-d525+ | All versions | No fix listed |
| supermicro x8dtl-3f | All versions | No fix listed |
| supermicro x8dtl-6f | All versions | No fix listed |
| supermicro x8dtl-if | All versions | No fix listed |
| supermicro x8dtn+-f | All versions | No fix listed |
| supermicro x8dtn+-f-lr | All versions | No fix listed |
| supermicro x8dtu-6f+ | All versions | No fix listed |
| supermicro x8dtu-6f+-lr | All versions | No fix listed |
| supermicro x8dtu-6tf+ | All versions | No fix listed |
| supermicro x8dtu-6tf+-lr | All versions | No fix listed |
| supermicro x8dtu-ln4f+ | All versions | No fix listed |
| supermicro x8dtu-ln4f+-lr | All versions | No fix listed |
| supermicro x8si6-f | All versions | No fix listed |
| supermicro x8sia-f | All versions | No fix listed |
| supermicro x8sie-f | All versions | No fix listed |
| supermicro x8sie-ln4f | All versions | No fix listed |
| supermicro x8sil-f | All versions | No fix listed |
| supermicro x8sit-f | All versions | No fix listed |
| supermicro x8sit-hf | All versions | No fix listed |
| supermicro x8siu-f | All versions | No fix listed |
| supermicro x9dax-7f | All versions | No fix listed |
| supermicro x9dax-7f-hft | All versions | No fix listed |
| supermicro x9dax-7tf | All versions | No fix listed |
| supermicro x9dax-if | All versions | No fix listed |
| supermicro x9dax-if-hft | All versions | No fix listed |
| supermicro x9dax-itf | All versions | No fix listed |
| supermicro x9db3-f | All versions | No fix listed |
| supermicro x9db3-tpf | All versions | No fix listed |
| supermicro x9dbi-f | All versions | No fix listed |
| supermicro x9dbi-tpf | All versions | No fix listed |
| supermicro x9dbl-3f | All versions | No fix listed |
| supermicro x9dbl-if | All versions | No fix listed |
| supermicro x9dbu-3f | All versions | No fix listed |
| supermicro x9dbu-if | All versions | No fix listed |
| supermicro x9dr3-f | All versions | No fix listed |
| supermicro x9dr3-ln4f+ | All versions | No fix listed |
| supermicro x9dr7-ln4f | All versions | No fix listed |
| supermicro x9dr7-ln4f-jbod | All versions | No fix listed |
| supermicro x9dr7-tf+ | All versions | No fix listed |
| supermicro x9drd-7jln4f | All versions | No fix listed |
| supermicro x9drd-7ln4f | All versions | No fix listed |
| supermicro x9drd-7ln4f-jbod | All versions | No fix listed |
| supermicro x9drd-ef | All versions | No fix listed |
| supermicro x9drd-if | All versions | No fix listed |
| supermicro x9dre-ln4f | All versions | No fix listed |
| supermicro x9dre-tf+ | All versions | No fix listed |
| supermicro x9drff | All versions | No fix listed |
| supermicro x9drff-7 | All versions | No fix listed |
| supermicro x9drff-7+ | All versions | No fix listed |
| supermicro x9drff-7g+ | All versions | No fix listed |
| supermicro x9drff-7t+ | All versions | No fix listed |
| supermicro x9drff-7tg+ | All versions | No fix listed |
| supermicro x9drff-i+ | All versions | No fix listed |
| supermicro x9drff-ig+ | All versions | No fix listed |
| supermicro x9drff-it+ | All versions | No fix listed |
| supermicro x9drff-itg+ | All versions | No fix listed |
| supermicro x9drfr | All versions | No fix listed |
| supermicro x9drg-hf | All versions | No fix listed |
| supermicro x9drg-hf+ | All versions | No fix listed |
| supermicro x9drg-htf | All versions | No fix listed |
| supermicro x9drg-htf+ | All versions | No fix listed |
| supermicro x9drh-7f | All versions | No fix listed |
| supermicro x9drh-7tf | All versions | No fix listed |
| supermicro x9drh-if | All versions | No fix listed |
| supermicro x9drh-itf | All versions | No fix listed |
| supermicro x9dri-f | All versions | No fix listed |
| supermicro x9dri-ln4f+ | All versions | No fix listed |
| supermicro x9drl-3f | All versions | No fix listed |
| supermicro x9drl-ef | All versions | No fix listed |
| supermicro x9drl-if | All versions | No fix listed |
| supermicro x9drt-f | All versions | No fix listed |
| supermicro x9drt-h6f | All versions | No fix listed |
| supermicro x9drt-h6ibff | All versions | No fix listed |
| supermicro x9drt-h6ibqf | All versions | No fix listed |
| supermicro x9drt-hf+ | All versions | No fix listed |
| supermicro x9drt-ibff | All versions | No fix listed |
| supermicro x9drt-ibqf | All versions | No fix listed |
| supermicro x9drw-3ln4f+ | All versions | No fix listed |
| supermicro x9drw-3tf+ | All versions | No fix listed |
| supermicro x9drw-7tpf+ | All versions | No fix listed |
| supermicro x9drw-itpf+ | All versions | No fix listed |
| supermicro x9drx+-f | All versions | No fix listed |
| supermicro x9qr7-tf | All versions | No fix listed |
| supermicro x9qr7-tf+ | All versions | No fix listed |
| supermicro x9qr7-tf-jbod | All versions | No fix listed |
| supermicro x9qri-f | All versions | No fix listed |
| supermicro x9qri-f+ | All versions | No fix listed |
| supermicro x9sbaa-f | All versions | No fix listed |
| supermicro x9sca-f | All versions | No fix listed |
| supermicro x9scd-f | All versions | No fix listed |
| supermicro x9sce-f | All versions | No fix listed |
| supermicro x9scff-f | All versions | No fix listed |
| supermicro x9sci-ln4f | All versions | No fix listed |
| supermicro x9scl+-f | All versions | No fix listed |
| supermicro x9scl-f | All versions | No fix listed |
| supermicro x9scm-f | All versions | No fix listed |
| supermicro x9scm-iif | All versions | No fix listed |
| supermicro x9spu-f | All versions | No fix listed |
| supermicro x9srd-f | All versions | No fix listed |
| supermicro x9sre-3f | All versions | No fix listed |
| supermicro x9sre-f | All versions | No fix listed |
| supermicro x9srg-f | All versions | No fix listed |
| supermicro x9sri-3f | All versions | No fix listed |
| supermicro x9sri-f | All versions | No fix listed |
| supermicro x9srl-f | All versions | No fix listed |
| supermicro x9srw-f | All versions | No fix listed |
References
- VU#648646 third-party-advisory us-government-resource
- 62094 vdb-entry
- www.supermicro.com
- www.thomas-krenn.com
- support.citrix.com
- www.usenix.org exploit