← Back

CVE-2013-3620

nvd nist
Published: Jan 2, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.

Affected (5)

Supermicro
2 products
Smt X9 Firmware
Smt X8 Firmware
Citrix
3 products
Netscaler Sdx Firmware
Netscaler Firmware
Netscaler Sd Wan Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Smt X9 Firmware
Before 3.15
Running on/withPlatform Versions
Supermicro
Sh7758
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Smt X8 Firmware
Before 3.12
Running on/withPlatform Versions
Supermicro
Sh7757
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Netscaler Sdx Firmware
Version 10
Running on/withPlatform Versions
Citrix
Netscaler Sdx
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Netscaler Firmware
All versions
Running on/withPlatform Versions
Citrix
Netscaler
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Netscaler Sd Wan Firmware
All versions
Running on/withPlatform Versions
Citrix
Netscaler Sd Wan
All versions

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (10)

Source: cret@cert.org
Third Party Advisory
Source: cret@cert.org
Third Party Advisory
Source: cret@cert.org
Third Party AdvisoryVDB Entry
Source: cret@cert.org
Third Party Advisory
Source: cret@cert.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.