CVE-2013-3607
Critical
Description
Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allow remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC), as demonstrated by the (1) username or (2) password field in login.cgi.
SeverityCritical
CVSS10.0
Exploit probability—
ProductSupermicro H8scm-f
PublishedSep 8, 2013
First seenSep 8, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| supermicro h8scm-f | No range specified | — |
| supermicro h8dcl-6f | No range specified | — |
| supermicro h8dcl-if | No range specified | — |
| supermicro h8dct-hibqf | No range specified | — |
| supermicro h8dct-hln4f | No range specified | — |
| supermicro h8dct-ibqf | No range specified | — |
| supermicro h8dg6-f | No range specified | — |
| supermicro h8dgg-qf | No range specified | — |
| supermicro h8dgi-f | No range specified | — |
| supermicro h8dgt-hf | No range specified | — |
| supermicro h8dgt-hibqf | No range specified | — |
| supermicro h8dgt-hlf | No range specified | — |
| supermicro h8dgt-hlibqf | No range specified | — |
| supermicro h8dgu-f | No range specified | — |
| supermicro h8dgu-ln4f\+ | No range specified | — |
| supermicro h8sgl-f | No range specified | — |
| supermicro h8sme-f | No range specified | — |
| supermicro h8sml-7 | No range specified | — |
| supermicro h8sml-7f | No range specified | — |
| supermicro h8sml-i | No range specified | — |
| supermicro h8sml-if | No range specified | — |
| supermicro x7spa-hf | No range specified | — |
| supermicro x7spa-hf-d525 | No range specified | — |
| supermicro x7spe-h-d525 | No range specified | — |
| supermicro x7spe-hf | No range specified | — |
| supermicro x7spe-hf-d525 | No range specified | — |
| supermicro x7spt-df-d525 | No range specified | — |
| supermicro x7spt-df-d525\+ | No range specified | — |
| supermicro x8dtl-3f | No range specified | — |
| supermicro x8dtl-6f | No range specified | — |
| supermicro x8dtl-if | No range specified | — |
| supermicro x8dtn\+-f | No range specified | — |
| supermicro x8dtn\+-f-lr | No range specified | — |
| supermicro x8dtu-6f\+ | No range specified | — |
| supermicro x8dtu-6f\+-lr | No range specified | — |
| supermicro x8dtu-6tf\+ | No range specified | — |
| supermicro x8dtu-6tf\+-lr | No range specified | — |
| supermicro x8dtu-ln4f\+ | No range specified | — |
| supermicro x8dtu-ln4f\+-lr | No range specified | — |
| supermicro x8si6-f | No range specified | — |
| supermicro x8sia-f | No range specified | — |
| supermicro x8sie-f | No range specified | — |
| supermicro x8sie-ln4f | No range specified | — |
| supermicro x8sil-f | No range specified | — |
| supermicro x8sit-f | No range specified | — |
| supermicro x8sit-hf | No range specified | — |
| supermicro x8siu-f | No range specified | — |
| supermicro x9dax-7f | No range specified | — |
| supermicro x9dax-7f-hft | No range specified | — |
| supermicro x9dax-7tf | No range specified | — |
| supermicro x9dax-if | No range specified | — |
| supermicro x9dax-if-hft | No range specified | — |
| supermicro x9dax-itf | No range specified | — |
| supermicro x9db3-f | No range specified | — |
| supermicro x9db3-tpf | No range specified | — |
| supermicro x9dbi-f | No range specified | — |
| supermicro x9dbi-tpf | No range specified | — |
| supermicro x9dbl-3f | No range specified | — |
| supermicro x9dbl-if | No range specified | — |
| supermicro x9dbu-3f | No range specified | — |
| supermicro x9dbu-if | No range specified | — |
| supermicro x9dr3-f | No range specified | — |
| supermicro x9dr3-ln4f\+ | No range specified | — |
| supermicro x9dr7-ln4f | No range specified | — |
| supermicro x9dr7-ln4f-jbod | No range specified | — |
| supermicro x9dr7-tf\+ | No range specified | — |
| supermicro x9drd-7jln4f | No range specified | — |
| supermicro x9drd-7ln4f | No range specified | — |
| supermicro x9drd-7ln4f-jbod | No range specified | — |
| supermicro x9drd-ef | No range specified | — |
| supermicro x9drd-if | No range specified | — |
| supermicro x9dre-ln4f | No range specified | — |
| supermicro x9dre-tf\+ | No range specified | — |
| supermicro x9drff | No range specified | — |
| supermicro x9drff-7 | No range specified | — |
| supermicro x9drff-7\+ | No range specified | — |
| supermicro x9drff-7g\+ | No range specified | — |
| supermicro x9drff-7t\+ | No range specified | — |
| supermicro x9drff-7tg\+ | No range specified | — |
| supermicro x9drff-i\+ | No range specified | — |
| supermicro x9drff-ig\+ | No range specified | — |
| supermicro x9drff-it\+ | No range specified | — |
| supermicro x9drff-itg\+ | No range specified | — |
| supermicro x9drfr | No range specified | — |
| supermicro x9drg-hf | No range specified | — |
| supermicro x9drg-hf\+ | No range specified | — |
| supermicro x9drg-htf | No range specified | — |
| supermicro x9drg-htf\+ | No range specified | — |
| supermicro x9drh-7f | No range specified | — |
| supermicro x9drh-7tf | No range specified | — |
| supermicro x9drh-if | No range specified | — |
| supermicro x9drh-itf | No range specified | — |
| supermicro x9dri-f | No range specified | — |
| supermicro x9dri-ln4f\+ | No range specified | — |
| supermicro x9drl-3f | No range specified | — |
| supermicro x9drl-ef | No range specified | — |
| supermicro x9drl-if | No range specified | — |
| supermicro x9drt-f | No range specified | — |
| supermicro x9drt-h6f | No range specified | — |
| supermicro x9drt-h6ibff | No range specified | — |
| supermicro x9drt-h6ibqf | No range specified | — |
| supermicro x9drt-hf\+ | No range specified | — |
| supermicro x9drt-ibff | No range specified | — |
| supermicro x9drt-ibqf | No range specified | — |
| supermicro x9drw-3ln4f\+ | No range specified | — |
| supermicro x9drw-3tf\+ | No range specified | — |
| supermicro x9drw-7tpf\+ | No range specified | — |
| supermicro x9drw-itpf\+ | No range specified | — |
| supermicro x9drx\+-f | No range specified | — |
| supermicro x9qr7-tf | No range specified | — |
| supermicro x9qr7-tf\+ | No range specified | — |
| supermicro x9qr7-tf-jbod | No range specified | — |
| supermicro x9qri-f | No range specified | — |
| supermicro x9qri-f\+ | No range specified | — |
| supermicro x9sbaa-f | No range specified | — |
| supermicro x9sca-f | No range specified | — |
| supermicro x9scd-f | No range specified | — |
| supermicro x9sce-f | No range specified | — |
| supermicro x9scff-f | No range specified | — |
| supermicro x9sci-ln4f | No range specified | — |
| supermicro x9scl\+-f | No range specified | — |
| supermicro x9scl-f | No range specified | — |
| supermicro x9scm-f | No range specified | — |
| supermicro x9scm-iif | No range specified | — |
| supermicro x9spu-f | No range specified | — |
| supermicro x9srd-f | No range specified | — |
| supermicro x9sre-3f | No range specified | — |
| supermicro x9sre-f | No range specified | — |
| supermicro x9srg-f | No range specified | — |
| supermicro x9sri-3f | No range specified | — |
| supermicro x9sri-f | No range specified | — |
| supermicro x9srl-f | No range specified | — |
| supermicro x9srw-f | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.