← Back

CVE-2013-3619

nvd nist
Published: Jan 2, 2020Modified: Nov 21, 2024

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.

Affected (5)

Supermicro
2 products
Smt X9 Firmware
Smt X8 Firmware
Citrix
3 products
Netscaler Sdx Firmware
Netscaler Firmware
Netscaler Sd Wan Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Smt X9 Firmware
Before 3.15
Running on/withPlatform Versions
Supermicro
Sh7758
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Smt X8 Firmware
Before 3.12
Running on/withPlatform Versions
Supermicro
Sh7757
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Netscaler Sdx Firmware
Version 10
Running on/withPlatform Versions
Citrix
Netscaler Sdx
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Netscaler Firmware
All versions
Running on/withPlatform Versions
Citrix
Netscaler
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Netscaler Sd Wan Firmware
All versions
Running on/withPlatform Versions
Citrix
Netscaler Sd Wan
All versions

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (10)

Source: cret@cert.org
Third Party Advisory
Source: cret@cert.org
Third Party Advisory
Source: cret@cert.org
Third Party AdvisoryVDB Entry
Source: cret@cert.org
Third Party Advisory
Source: cret@cert.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.