Vulnerability Intelligence Report
CVE-2013-3608
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.
No Active Exploit Signals
CVSS Base Score
10.0
HIGH
EPSS Probability:6.41%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| supermicro | h8dcl-6f | all |
| supermicro | h8dcl-if | all |
| supermicro | h8dct-hibqf | all |
| supermicro | h8dct-hln4f | all |
| supermicro | h8dct-ibqf | all |
| supermicro | h8dg6-f | all |
| supermicro | h8dgg-qf | all |
| supermicro | h8dgi-f | all |
| supermicro | h8dgt-hf | all |
| supermicro | h8dgt-hibqf | all |
| supermicro | h8dgt-hlf | all |
| supermicro | h8dgt-hlibqf | all |
| supermicro | h8dgu-f | all |
| supermicro | h8dgu-ln4f\+ | all |
| supermicro | h8scm-f | all |
| supermicro | h8sgl-f | all |
| supermicro | h8sme-f | all |
| supermicro | h8sml-7 | all |
| supermicro | h8sml-7f | all |
| supermicro | h8sml-i | all |
| supermicro | h8sml-if | all |
| supermicro | x7spa-hf | all |
| supermicro | x7spa-hf-d525 | all |
| supermicro | x7spe-h-d525 | all |
| supermicro | x7spe-hf | all |
| supermicro | x7spe-hf-d525 | all |
| supermicro | x7spt-df-d525 | all |
| supermicro | x7spt-df-d525\+ | all |
| supermicro | x8dtl-3f | all |
| supermicro | x8dtl-6f | all |
| supermicro | x8dtl-if | all |
| supermicro | x8dtn\+-f | all |
| supermicro | x8dtn\+-f-lr | all |
| supermicro | x8dtu-6f\+ | all |
| supermicro | x8dtu-6f\+-lr | all |
| supermicro | x8dtu-6tf\+ | all |
| supermicro | x8dtu-6tf\+-lr | all |
| supermicro | x8dtu-ln4f\+ | all |
| supermicro | x8dtu-ln4f\+-lr | all |
| supermicro | x8si6-f | all |
| supermicro | x8sia-f | all |
| supermicro | x8sie-f | all |
| supermicro | x8sie-ln4f | all |
| supermicro | x8sil-f | all |
| supermicro | x8sit-f | all |
| supermicro | x8sit-hf | all |
| supermicro | x8siu-f | all |
| supermicro | x9dax-7f | all |
| supermicro | x9dax-7f-hft | all |
| supermicro | x9dax-7tf | all |
| supermicro | x9dax-if | all |
| supermicro | x9dax-if-hft | all |
| supermicro | x9dax-itf | all |
| supermicro | x9db3-f | all |
| supermicro | x9db3-tpf | all |
| supermicro | x9dbi-f | all |
| supermicro | x9dbi-tpf | all |
| supermicro | x9dbl-3f | all |
| supermicro | x9dbl-if | all |
| supermicro | x9dbu-3f | all |
| supermicro | x9dbu-if | all |
| supermicro | x9dr3-f | all |
| supermicro | x9dr3-ln4f\+ | all |
| supermicro | x9dr7-ln4f | all |
| supermicro | x9dr7-ln4f-jbod | all |
| supermicro | x9dr7-tf\+ | all |
| supermicro | x9drd-7jln4f | all |
| supermicro | x9drd-7ln4f | all |
| supermicro | x9drd-7ln4f-jbod | all |
| supermicro | x9drd-ef | all |
| supermicro | x9drd-if | all |
| supermicro | x9dre-ln4f | all |
| supermicro | x9dre-tf\+ | all |
| supermicro | x9drff | all |
| supermicro | x9drff-7 | all |
| supermicro | x9drff-7\+ | all |
| supermicro | x9drff-7g\+ | all |
| supermicro | x9drff-7t\+ | all |
| supermicro | x9drff-7tg\+ | all |
| supermicro | x9drff-i\+ | all |
| supermicro | x9drff-ig\+ | all |
| supermicro | x9drff-it\+ | all |
| supermicro | x9drff-itg\+ | all |
| supermicro | x9drfr | all |
| supermicro | x9drg-hf | all |
| supermicro | x9drg-hf\+ | all |
| supermicro | x9drg-htf | all |
| supermicro | x9drg-htf\+ | all |
| supermicro | x9drh-7f | all |
| supermicro | x9drh-7tf | all |
| supermicro | x9drh-if | all |
| supermicro | x9drh-itf | all |
| supermicro | x9dri-f | all |
| supermicro | x9dri-ln4f\+ | all |
| supermicro | x9drl-3f | all |
| supermicro | x9drl-ef | all |
| supermicro | x9drl-if | all |
| supermicro | x9drt-f | all |
| supermicro | x9drt-h6f | all |
| supermicro | x9drt-h6ibff | all |
| supermicro | x9drt-h6ibqf | all |
| supermicro | x9drt-hf\+ | all |
| supermicro | x9drt-ibff | all |
| supermicro | x9drt-ibqf | all |
| supermicro | x9drw-3ln4f\+ | all |
| supermicro | x9drw-3tf\+ | all |
| supermicro | x9drw-7tpf\+ | all |
| supermicro | x9drw-itpf\+ | all |
| supermicro | x9drx\+-f | all |
| supermicro | x9qr7-tf | all |
| supermicro | x9qr7-tf\+ | all |
| supermicro | x9qr7-tf-jbod | all |
| supermicro | x9qri-f | all |
| supermicro | x9qri-f\+ | all |
| supermicro | x9sbaa-f | all |
| supermicro | x9sca-f | all |
| supermicro | x9scd-f | all |
| supermicro | x9sce-f | all |
| supermicro | x9scff-f | all |
| supermicro | x9sci-ln4f | all |
| supermicro | x9scl\+-f | all |
| supermicro | x9scl-f | all |
| supermicro | x9scm-f | all |
| supermicro | x9scm-iif | all |
| supermicro | x9spu-f | all |
| supermicro | x9srd-f | all |
| supermicro | x9sre-3f | all |
| supermicro | x9sre-f | all |
| supermicro | x9srg-f | all |
| supermicro | x9sri-3f | all |
| supermicro | x9sri-f | all |
| supermicro | x9srl-f | all |
| supermicro | x9srw-f | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
6.413%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | CERT/CC · CERT · USA |
| Reserved | 2013-05-21T00:00:00 |
| Published | 2013-09-08T01:00:00 |
| Patch Date | 2013-08-13 |
| Last Updated | 2024-08-06T16:14:56 |
Community Chatter & Buzz