CVE-2013-3619 Hardcoded credentials in IPMI
Hardcoded private encryption keys in Supermicro IPMI firmware allow attackers to bypass SSL and SSH security controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-3619?
CVE-2013-3619 is a high-severity vulnerability in Supermicro IPMI, published on 2 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.
Weakness: CWE-798
Which versions are affected by CVE-2013-3619?
It affects 5 products.
Products include Citrix Netscaler Firmware, Citrix Netscaler Sd-Wan Firmware, Citrix Netscaler Sdx Firmware, Supermicro Smt X8 Firmware, Supermicro Smt X9 Firmware.
How do I fix CVE-2013-3619?
No fix has been published for CVE-2013-3619 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-3619 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-3619 exists.
Public exploit code: 1 Metasploit module.
Other vulnerabilities in Supermicro IPMI
Sources
Also known as GHSA-9x36-hp8r-pf6p.