CVE-2013-3619 - Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon

Back Back to CVE browser

HIGH

Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon

Published Jan 2, 2020

8.1

HIGH

CVSS 3.1

EPSS 9.69%

Description

Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.

Affected products

Vendor Supermicro Product IPMI Default
n/a
- Version
  before SMT_X9_317 and before SMT X8 312
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Supermicro

IPMI

n/a

Version	Status	Constraints
before SMT_X9_317 and before SMT X8 312	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (5)

http://support.citrix.com/article/CTX216642
x_refsource_CONFIRMThird Party Advisory
https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilities
x_refsource_MISCThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89044
x_refsource_MISCThird Party AdvisoryVDB Entry
https://support.citrix.com/article/CTX216642
x_refsource_CONFIRMThird Party Advisory
https://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://support.citrix.com/article/CTX216642		x_refsource_CONFIRMThird Party Advisory
https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilities		x_refsource_MISCThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89044		x_refsource_MISCThird Party AdvisoryVDB Entry
https://support.citrix.com/article/CTX216642		x_refsource_CONFIRMThird Party Advisory
https://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Jan 2, 2020

Updated Aug 6, 2024

Reserved May 21, 2013

Link CVE-2013-3619

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-3619

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-3619