Skip to main content

Intelligent Platform Management Interface

1 CVEs product

Monthly

CVE-2013-4786 Jul 08, 22:55 HIGH POC THREAT Act Now

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 67.8%.

Authentication Bypass Microsoft Oracle Intel Fujitsu M10 Firmware +1
NVD Exploit-DB
CVSS 3.0
7.5
EPSS
67.8%
Threat
5.0
EPSS 68% 5.0 CVSS 7.5
HIGH POC THREAT Act Now

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 67.8%.

Authentication Bypass Microsoft Oracle +3
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy