CVE-2013-4037 The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Fl...
MediumCVSS 4.3
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bladecenter | = hs22 | No fix listed |
| ibm bladecenter | = hs22v | No fix listed |
| ibm bladecenter | = hs23 | No fix listed |
| ibm bladecenter | = hs23e | No fix listed |
| ibm bladecenter | = hx5 | No fix listed |
| ibm flex system x220 compute node | All versions | No fix listed |
| ibm flex system x240 compute node | All versions | No fix listed |
| ibm flex system x440 compute node | All versions | No fix listed |
| ibm system x idataplex dx360 m2 server | All versions | No fix listed |
| ibm system x idataplex dx360 m3 server | All versions | No fix listed |
| ibm system x idataplex dx360 m4 server | All versions | No fix listed |
| ibm system x3100 m4 | All versions | No fix listed |
| ibm system x3200 m3 | All versions | No fix listed |
| ibm system x3250 m3 | All versions | No fix listed |
| ibm system x3250 m4 | All versions | No fix listed |
| ibm system x3400 m2 | All versions | No fix listed |
| ibm system x3400 m3 | All versions | No fix listed |
| ibm system x3500 m2 | All versions | No fix listed |
| ibm system x3500 m3 | All versions | No fix listed |
| ibm system x3500 m4 | All versions | No fix listed |
| ibm system x3530 m4 | All versions | No fix listed |
| ibm system x3550 m2 | All versions | No fix listed |
| ibm system x3550 m3 | All versions | No fix listed |
| ibm system x3550 m4 | All versions | No fix listed |
| ibm system x3620 m3 | All versions | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm system x3630 m3 | All versions | No fix listed |
| ibm system x3630 m4 | All versions | No fix listed |
| ibm system x3650 m2 | All versions | No fix listed |
| ibm system x3650 m3 | All versions | No fix listed |
| ibm system x3650 m4 | All versions | No fix listed |
| ibm system x3690 x5 | All versions | No fix listed |
| ibm system x3750 m4 | All versions | No fix listed |
| ibm system x3850 x5 | All versions | No fix listed |
| ibm system x3950 x5 | All versions | No fix listed |
References
- www.ibm.com vendor-advisory
- imm-cve20134037-ipmi-weak(86173) vdb-entry