CVE-2013-4031
Critical
Description
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Ibm Bladecenter
PublishedAug 9, 2013
First seenAug 9, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bladecenter | hs22, hs22v, hs23, hs23e, hx5 | — |
| ibm flex_system_x220_compute_node | No range specified | — |
| ibm flex_system_x240_compute_node | No range specified | — |
| ibm flex_system_x440_compute_node | No range specified | — |
| ibm system_x_idataplex_dx360_m2_server | No range specified | — |
| ibm system_x_idataplex_dx360_m3_server | No range specified | — |
| ibm system_x_idataplex_dx360_m4_server | No range specified | — |
| ibm system_x3100_m4 | No range specified | — |
| ibm system_x3200_m3 | No range specified | — |
| ibm system_x3250_m3 | No range specified | — |
| ibm system_x3250_m4 | No range specified | — |
| ibm system_x3400_m2 | No range specified | — |
| ibm system_x3400_m3 | No range specified | — |
| ibm system_x3500_m2 | No range specified | — |
| ibm system_x3500_m3 | No range specified | — |
| ibm system_x3500_m4 | No range specified | — |
| ibm system_x3530_m4 | No range specified | — |
| ibm system_x3550_m2 | No range specified | — |
| ibm system_x3550_m3 | No range specified | — |
| ibm system_x3550_m4 | No range specified | — |
| ibm system_x3620_m3 | No range specified | — |
| ibm system_x3630_m3 | No range specified | — |
| ibm system_x3630_m4 | No range specified | — |
| ibm system_x3650_m2 | No range specified | — |
| ibm system_x3650_m3 | No range specified | — |
| ibm system_x3650_m4 | No range specified | — |
| ibm system_x3690_x5 | No range specified | — |
| ibm system_x3750_m4 | No range specified | — |
| ibm system_x3850_x5 | No range specified | — |
| ibm system_x3950_x5 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.