PT-2013-4512 · Supermicro · X9Dr*+14

Published 2013-09-08 · Updated 2020-01-02 · CVE-2013-3607

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Supermicro H8DC* versions (affected versions not specified) Supermicro H8DG* versions (affected versions not specified) Supermicro H8SCM-F versions (affected versions not specified) Supermicro H8SM* versions (affected versions not specified) Supermicro X7SP* versions (affected versions not specified) Supermicro X8DT* versions (affected versions not specified) Supermicro X8SI* versions (affected versions not specified) Supermicro X9DAX-* versions (affected versions not specified) Supermicro X9DB* versions (affected versions not specified) Supermicro X9DR* versions (affected versions not specified) Supermicro X9QR* versions (affected versions not specified) Supermicro X9SBAA-F versions (affected versions not specified) Supermicro X9SC* versions (affected versions not specified) Supermicro X9SPU-F versions (affected versions not specified) Supermicro X9SR* versions (affected versions not specified)

Description The issue is related to multiple stack-based buffer overflows in the web interface of the Intelligent Platform Management Interface (IPMI) implementation. This allows remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC). The vulnerability can be demonstrated through the username or password field in the "login.cgi" endpoint.

Recommendations For Supermicro H8DC*, consider disabling the web interface until a patch is available. For Supermicro H8DG*, restrict access to the "login.cgi" endpoint to minimize the risk of exploitation. For Supermicro H8SCM-F, avoid using the username and password fields in the "login.cgi" endpoint until the issue is resolved. For Supermicro H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-, X9DB, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR*, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-3607

Affected Products

H8Dc*

H8Dg*

H8Scm-F

H8Sm*

X7Sp*

X8Dt*

X8Si*

X9Dax-*

X9Db*

X9Dr*

X9Qr*

X9Sbaa-F

X9Sc*

X9Spu-F

X9Sr*

References · 8

• 🔥 https://usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3607 · Security Note
• http://kb.cert.org/vuls/id/648646 · Note
• http://securityfocus.com/bid/62094 · Note
• http://supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf · Note
• https://t.me/cibsecurity/8953 · Telegram Post
• http://thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013 · Note
• https://support.citrix.com/article/CTX216642 · Note