PT-2020-7451 · Supermicro · Supermicro X9+1

Published 2020-01-02 · Updated 2020-01-15 · CVE-2013-3619

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT X9 317 Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X8 generation motherboards before SMT X8 312

Description: The issue concerns hardcoded private encryption keys in the IPMI firmware for certain Supermicro motherboards. Specifically, the keys are used for the Lighttpd web server SSL interface and the Dropbear SSH daemon.

Recommendations: For Supermicro X9 generation motherboards before SMT X9 317, update the firmware to SMT X9 317 or later. For Supermicro X8 generation motherboards before SMT X8 312, update the firmware to SMT X8 312 or later. As a temporary workaround, consider restricting access to the Lighttpd web server SSL interface and the Dropbear SSH daemon until a patch is available.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2013-3619

Affected Products

Supermicro X8

Supermicro X9

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/smt_ipmi_static_cert_scanner.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3619 · Security Note
• https://supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf · Vendor Advisory
• https://support.citrix.com/article/CTX216642 · Note
• https://t.me/cibsecurity/8955 · Telegram Post
• http://support.citrix.com/article/CTX216642 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89044 · Note
• https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilities · Note