CVE-2013-4786 PUBLISHED CVSS 7.5 HIGH

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.

EPSS 73.19% · 98.8th percentile

Risk Scores

CVSS v3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
73.19%
98.8th percentile

Affected Products

VendorProductVersions
n/an/an/a
oraclefujitsu_m10_firmware0
intelintelligent_platform_management_interface2.0

Timeline

References

Open in Interactive Console →