CVEvulnerability

CVE-2013-4037

4.3 MEDIUM Published 2013-08-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected configurations

• ibm bladecenter hs22 • ibm bladecenter hs22v • ibm bladecenter hs23 • ibm bladecenter hs23e • ibm bladecenter hx5 • ibm flex system x220 compute node • ibm flex system x240 compute node • ibm flex system x440 compute node • ibm system x idataplex dx360 m2 server • ibm system x idataplex dx360 m3 server • ibm system x idataplex dx360 m4 server • ibm system x3100 m4 • ibm system x3200 m3 • ibm system x3250 m3 • ibm system x3250 m4 • ibm system x3400 m2 • ibm system x3400 m3 • ibm system x3500 m2 • ibm system x3500 m3 • ibm system x3500 m4 • ibm system x3530 m4 • ibm system x3550 m2 • ibm system x3550 m3 • ibm system x3550 m4 • ibm system x3620 m3 • ibm system x3630 m3 • ibm system x3630 m4 • ibm system x3650 m2 • ibm system x3650 m3 • ibm system x3650 m4 • ibm system x3690 x5 • ibm system x3750 m4 • ibm system x3850 x5 • ibm system x3950 x5

References