CVE-2013-4037

The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2013-08-09

Last modified

2024-08-06

Affected products

• Bladecenter (Ibm)
• Flex System X220 Compute Node (Ibm)
• Flex System X240 Compute Node (Ibm)
• Flex System X440 Compute Node (Ibm)
• System X3100 M4 (Ibm)
• System X3200 M3 (Ibm)
• System X3250 M3 (Ibm)
• System X3250 M4 (Ibm)
• System X3400 M2 (Ibm)
• System X3400 M3 (Ibm)
• System X3500 M2 (Ibm)
• System X3500 M3 (Ibm)
• System X3500 M4 (Ibm)
• System X3530 M4 (Ibm)
• System X3550 M2 (Ibm)
• System X3550 M3 (Ibm)
• System X3550 M4 (Ibm)
• System X3620 M3 (Ibm)
• System X3630 M3 (Ibm)
• System X3630 M4 (Ibm)
• System X3650 M2 (Ibm)
• System X3650 M3 (Ibm)
• System X3650 M4 (Ibm)
• System X3690 X5 (Ibm)
• System X3750 M4 (Ibm)
• System X3850 X5 (Ibm)
• System X3950 X5 (Ibm)
• System X Idataplex Dx360 M2 Server (Ibm)
• System X Idataplex Dx360 M3 Server (Ibm)
• System X Idataplex Dx360 M4 Server (Ibm)

References

• http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86173