CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2013-3620
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
Severity
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- citrix:netscaler_firmware
- citrix:netscaler_sd-wan_firmware
- citrix:netscaler_sdx_firmware
- supermicro:smt_x8_firmware
- supermicro:smt_x9_firmware
References
- http://support.citrix.com/article/CTX216642
- https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilities
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89045
- https://support.citrix.com/article/CTX216642
- https://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf