The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.
References
Configurations
Information
Published : 2013-07-08 15:55
Updated : 2013-10-16 07:37
NVD link : CVE-2013-4782
Mitre link : CVE-2013-4782
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
supermicro
- bmc