CVEvulnerability

CVE-2013-4031

10.0 HIGH Published 2013-08-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-255

Description

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.

Affected configurations

• ibm bladecenter hs22 • ibm bladecenter hs22v • ibm bladecenter hs23 • ibm bladecenter hs23e • ibm bladecenter hx5 • ibm flex system x220 compute node • ibm flex system x240 compute node • ibm flex system x440 compute node • ibm system x idataplex dx360 m2 server • ibm system x idataplex dx360 m3 server • ibm system x idataplex dx360 m4 server • ibm system x3100 m4 • ibm system x3200 m3 • ibm system x3250 m3 • ibm system x3250 m4 • ibm system x3400 m2 • ibm system x3400 m3 • ibm system x3500 m2 • ibm system x3500 m3 • ibm system x3500 m4 • ibm system x3530 m4 • ibm system x3550 m2 • ibm system x3550 m3 • ibm system x3550 m4 • ibm system x3620 m3 • ibm system x3630 m3 • ibm system x3630 m4 • ibm system x3650 m2 • ibm system x3650 m3 • ibm system x3650 m4 • ibm system x3690 x5 • ibm system x3750 m4 • ibm system x3850 x5 • ibm system x3950 x5

Related

Weakness · not in database (1)

References