Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2013-3609 Details

Description

The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices relies on JavaScript code on the client for authorization checks, which allows remote authenticated users to bypass intended access restrictions via a crafted request, related to the PrivilegeCallBack function.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.citrix.com/article/CTX216642	CVE
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	CVE	Exploit
http://www.kb.cert.org/vuls/id/648646	CVE	US Government Resource
http://www.securityfocus.com/bid/62098	CVE
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	CVE
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	CVE
https://support.citrix.com/article/CTX216642	[email protected]
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf	[email protected]	Exploit
http://www.kb.cert.org/vuls/id/648646	[email protected]	US Government Resource
http://www.securityfocus.com/bid/62098	[email protected]
http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf	[email protected]
http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013	[email protected]

see all 12 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Affected Products

Product	Versions
supermicro h8dcl-6f	All versions
CPE cpe:2.3:h:supermicro:h8dcl-6f:-:::::::* Remediation No remediation found in references.
supermicro h8dcl-if	All versions
CPE cpe:2.3:h:supermicro:h8dcl-if:-:::::::* Remediation No remediation found in references.
supermicro h8dct-hibqf	All versions
CPE cpe:2.3:h:supermicro:h8dct-hibqf:-:::::::* Remediation No remediation found in references.
supermicro h8dct-hln4f	All versions
CPE cpe:2.3:h:supermicro:h8dct-hln4f:-:::::::* Remediation No remediation found in references.
supermicro h8dct-ibqf	All versions
CPE cpe:2.3:h:supermicro:h8dct-ibqf:-:::::::* Remediation No remediation found in references.
supermicro h8dg6-f	All versions
CPE cpe:2.3:h:supermicro:h8dg6-f:-:::::::* Remediation No remediation found in references.
supermicro h8dgg-qf	All versions
CPE cpe:2.3:h:supermicro:h8dgg-qf:-:::::::* Remediation No remediation found in references.
supermicro h8dgi-f	All versions
CPE cpe:2.3:h:supermicro:h8dgi-f:-:::::::* Remediation No remediation found in references.
supermicro h8dgt-hf	All versions
CPE cpe:2.3:h:supermicro:h8dgt-hf:-:::::::* Remediation No remediation found in references.
supermicro h8dgt-hibqf	All versions
CPE cpe:2.3:h:supermicro:h8dgt-hibqf:-:::::::* Remediation No remediation found in references.
supermicro h8dgt-hlf	All versions
CPE cpe:2.3:h:supermicro:h8dgt-hlf:-:::::::* Remediation No remediation found in references.
supermicro h8dgt-hlibqf	All versions
CPE cpe:2.3:h:supermicro:h8dgt-hlibqf:-:::::::* Remediation No remediation found in references.
supermicro h8dgu-f	All versions
CPE cpe:2.3:h:supermicro:h8dgu-f:-:::::::* Remediation No remediation found in references.
supermicro h8dgu-ln4f+	All versions
CPE cpe:2.3:h:supermicro:h8dgu-ln4f+:-:::::::* Remediation No remediation found in references.
supermicro h8scm-f	All versions
CPE cpe:2.3:h:supermicro:h8scm-f:-:::::::* Remediation No remediation found in references.
supermicro h8sgl-f	All versions
CPE cpe:2.3:h:supermicro:h8sgl-f:-:::::::* Remediation No remediation found in references.
supermicro h8sme-f	All versions
CPE cpe:2.3:h:supermicro:h8sme-f:-:::::::* Remediation No remediation found in references.
supermicro h8sml-7	All versions
CPE cpe:2.3:h:supermicro:h8sml-7:-:::::::* Remediation No remediation found in references.
supermicro h8sml-7f	All versions
CPE cpe:2.3:h:supermicro:h8sml-7f:-:::::::* Remediation No remediation found in references.
supermicro h8sml-i	All versions
CPE cpe:2.3:h:supermicro:h8sml-i:-:::::::* Remediation No remediation found in references.
supermicro h8sml-if	All versions
CPE cpe:2.3:h:supermicro:h8sml-if:-:::::::* Remediation No remediation found in references.
supermicro x7spa-hf	All versions
CPE cpe:2.3:h:supermicro:x7spa-hf:-:::::::* Remediation No remediation found in references.
supermicro x7spa-hf-d525	All versions
CPE cpe:2.3:h:supermicro:x7spa-hf-d525:-:::::::* Remediation No remediation found in references.
supermicro x7spe-h-d525	All versions
CPE cpe:2.3:h:supermicro:x7spe-h-d525:-:::::::* Remediation No remediation found in references.
supermicro x7spe-hf	All versions
CPE cpe:2.3:h:supermicro:x7spe-hf:-:::::::* Remediation No remediation found in references.
supermicro x7spe-hf-d525	All versions
CPE cpe:2.3:h:supermicro:x7spe-hf-d525:-:::::::* Remediation No remediation found in references.
supermicro x7spt-df-d525	All versions
CPE cpe:2.3:h:supermicro:x7spt-df-d525:-:::::::* Remediation No remediation found in references.
supermicro x7spt-df-d525+	All versions
CPE cpe:2.3:h:supermicro:x7spt-df-d525+:-:::::::* Remediation No remediation found in references.
supermicro x8dtl-3f	All versions
CPE cpe:2.3:h:supermicro:x8dtl-3f:-:::::::* Remediation No remediation found in references.
supermicro x8dtl-6f	All versions
CPE cpe:2.3:h:supermicro:x8dtl-6f:-:::::::* Remediation No remediation found in references.
supermicro x8dtl-if	All versions
CPE cpe:2.3:h:supermicro:x8dtl-if:-:::::::* Remediation No remediation found in references.
supermicro x8dtn+-f	All versions
CPE cpe:2.3:h:supermicro:x8dtn+-f:-:::::::* Remediation No remediation found in references.
supermicro x8dtn+-f-lr	All versions
CPE cpe:2.3:h:supermicro:x8dtn+-f-lr:-:::::::* Remediation No remediation found in references.
supermicro x8dtu-6f+	All versions
CPE cpe:2.3:h:supermicro:x8dtu-6f+:-:::::::* Remediation No remediation found in references.
supermicro x8dtu-6f+-lr	All versions
CPE cpe:2.3:h:supermicro:x8dtu-6f+-lr:-:::::::* Remediation No remediation found in references.
supermicro x8dtu-6tf+	All versions
CPE cpe:2.3:h:supermicro:x8dtu-6tf+:-:::::::* Remediation No remediation found in references.
supermicro x8dtu-6tf+-lr	All versions
CPE cpe:2.3:h:supermicro:x8dtu-6tf+-lr:-:::::::* Remediation No remediation found in references.
supermicro x8dtu-ln4f+	All versions
CPE cpe:2.3:h:supermicro:x8dtu-ln4f+:-:::::::* Remediation No remediation found in references.
supermicro x8dtu-ln4f+-lr	All versions
CPE cpe:2.3:h:supermicro:x8dtu-ln4f+-lr:-:::::::* Remediation No remediation found in references.
supermicro x8si6-f	All versions
CPE cpe:2.3:h:supermicro:x8si6-f:-:::::::* Remediation No remediation found in references.
supermicro x8sia-f	All versions
CPE cpe:2.3:h:supermicro:x8sia-f:-:::::::* Remediation No remediation found in references.
supermicro x8sie-f	All versions
CPE cpe:2.3:h:supermicro:x8sie-f:-:::::::* Remediation No remediation found in references.
supermicro x8sie-ln4f	All versions
CPE cpe:2.3:h:supermicro:x8sie-ln4f:-:::::::* Remediation No remediation found in references.
supermicro x8sil-f	All versions
CPE cpe:2.3:h:supermicro:x8sil-f:-:::::::* Remediation No remediation found in references.
supermicro x8sit-f	All versions
CPE cpe:2.3:h:supermicro:x8sit-f:-:::::::* Remediation No remediation found in references.
supermicro x8sit-hf	All versions
CPE cpe:2.3:h:supermicro:x8sit-hf:-:::::::* Remediation No remediation found in references.
supermicro x8siu-f	All versions
CPE cpe:2.3:h:supermicro:x8siu-f:-:::::::* Remediation No remediation found in references.
supermicro x9dax-7f	All versions
CPE cpe:2.3:h:supermicro:x9dax-7f:-:::::::* Remediation No remediation found in references.
supermicro x9dax-7f-hft	All versions
CPE cpe:2.3:h:supermicro:x9dax-7f-hft:-:::::::* Remediation No remediation found in references.
supermicro x9dax-7tf	All versions
CPE cpe:2.3:h:supermicro:x9dax-7tf:-:::::::* Remediation No remediation found in references.
supermicro x9dax-if	All versions
CPE cpe:2.3:h:supermicro:x9dax-if:-:::::::* Remediation No remediation found in references.
supermicro x9dax-if-hft	All versions
CPE cpe:2.3:h:supermicro:x9dax-if-hft:-:::::::* Remediation No remediation found in references.
supermicro x9dax-itf	All versions
CPE cpe:2.3:h:supermicro:x9dax-itf:-:::::::* Remediation No remediation found in references.
supermicro x9db3-f	All versions
CPE cpe:2.3:h:supermicro:x9db3-f:-:::::::* Remediation No remediation found in references.
supermicro x9db3-tpf	All versions
CPE cpe:2.3:h:supermicro:x9db3-tpf:-:::::::* Remediation No remediation found in references.
supermicro x9dbi-f	All versions
CPE cpe:2.3:h:supermicro:x9dbi-f:-:::::::* Remediation No remediation found in references.
supermicro x9dbi-tpf	All versions
CPE cpe:2.3:h:supermicro:x9dbi-tpf:-:::::::* Remediation No remediation found in references.
supermicro x9dbl-3f	All versions
CPE cpe:2.3:h:supermicro:x9dbl-3f:-:::::::* Remediation No remediation found in references.
supermicro x9dbl-if	All versions
CPE cpe:2.3:h:supermicro:x9dbl-if:-:::::::* Remediation No remediation found in references.
supermicro x9dbu-3f	All versions
CPE cpe:2.3:h:supermicro:x9dbu-3f:-:::::::* Remediation No remediation found in references.
supermicro x9dbu-if	All versions
CPE cpe:2.3:h:supermicro:x9dbu-if:-:::::::* Remediation No remediation found in references.
supermicro x9dr3-f	All versions
CPE cpe:2.3:h:supermicro:x9dr3-f:-:::::::* Remediation No remediation found in references.
supermicro x9dr3-ln4f+	All versions
CPE cpe:2.3:h:supermicro:x9dr3-ln4f+:-:::::::* Remediation No remediation found in references.
supermicro x9dr7-ln4f	All versions
CPE cpe:2.3:h:supermicro:x9dr7-ln4f:-:::::::* Remediation No remediation found in references.
supermicro x9dr7-ln4f-jbod	All versions
CPE cpe:2.3:h:supermicro:x9dr7-ln4f-jbod:-:::::::* Remediation No remediation found in references.
supermicro x9dr7-tf+	All versions
CPE cpe:2.3:h:supermicro:x9dr7-tf+:-:::::::* Remediation No remediation found in references.
supermicro x9drd-7jln4f	All versions
CPE cpe:2.3:h:supermicro:x9drd-7jln4f:-:::::::* Remediation No remediation found in references.
supermicro x9drd-7ln4f	All versions
CPE cpe:2.3:h:supermicro:x9drd-7ln4f:-:::::::* Remediation No remediation found in references.
supermicro x9drd-7ln4f-jbod	All versions
CPE cpe:2.3:h:supermicro:x9drd-7ln4f-jbod:-:::::::* Remediation No remediation found in references.
supermicro x9drd-ef	All versions
CPE cpe:2.3:h:supermicro:x9drd-ef:-:::::::* Remediation No remediation found in references.
supermicro x9drd-if	All versions
CPE cpe:2.3:h:supermicro:x9drd-if:-:::::::* Remediation No remediation found in references.
supermicro x9dre-ln4f	All versions
CPE cpe:2.3:h:supermicro:x9dre-ln4f:-:::::::* Remediation No remediation found in references.
supermicro x9dre-tf+	All versions
CPE cpe:2.3:h:supermicro:x9dre-tf+:-:::::::* Remediation No remediation found in references.
supermicro x9drff	All versions
CPE cpe:2.3:h:supermicro:x9drff:-:::::::* Remediation No remediation found in references.
supermicro x9drff-7	All versions
CPE cpe:2.3:h:supermicro:x9drff-7:-:::::::* Remediation No remediation found in references.
supermicro x9drff-7+	All versions
CPE cpe:2.3:h:supermicro:x9drff-7+:-:::::::* Remediation No remediation found in references.
supermicro x9drff-7g+	All versions
CPE cpe:2.3:h:supermicro:x9drff-7g+:-:::::::* Remediation No remediation found in references.
supermicro x9drff-7t+	All versions
CPE cpe:2.3:h:supermicro:x9drff-7t+:-:::::::* Remediation No remediation found in references.
supermicro x9drff-7tg+	All versions
CPE cpe:2.3:h:supermicro:x9drff-7tg+:-:::::::* Remediation No remediation found in references.
supermicro x9drff-i+	All versions
CPE cpe:2.3:h:supermicro:x9drff-i+:-:::::::* Remediation No remediation found in references.
supermicro x9drff-ig+	All versions
CPE cpe:2.3:h:supermicro:x9drff-ig+:-:::::::* Remediation No remediation found in references.
supermicro x9drff-it+	All versions
CPE cpe:2.3:h:supermicro:x9drff-it+:-:::::::* Remediation No remediation found in references.
supermicro x9drff-itg+	All versions
CPE cpe:2.3:h:supermicro:x9drff-itg+:-:::::::* Remediation No remediation found in references.
supermicro x9drfr	All versions
CPE cpe:2.3:h:supermicro:x9drfr:-:::::::* Remediation No remediation found in references.
supermicro x9drg-hf	All versions
CPE cpe:2.3:h:supermicro:x9drg-hf:-:::::::* Remediation No remediation found in references.
supermicro x9drg-hf+	All versions
CPE cpe:2.3:h:supermicro:x9drg-hf+:-:::::::* Remediation No remediation found in references.
supermicro x9drg-htf	All versions
CPE cpe:2.3:h:supermicro:x9drg-htf:-:::::::* Remediation No remediation found in references.
supermicro x9drg-htf+	All versions
CPE cpe:2.3:h:supermicro:x9drg-htf+:-:::::::* Remediation No remediation found in references.
supermicro x9drh-7f	All versions
CPE cpe:2.3:h:supermicro:x9drh-7f:-:::::::* Remediation No remediation found in references.
supermicro x9drh-7tf	All versions
CPE cpe:2.3:h:supermicro:x9drh-7tf:-:::::::* Remediation No remediation found in references.
supermicro x9drh-if	All versions
CPE cpe:2.3:h:supermicro:x9drh-if:-:::::::* Remediation No remediation found in references.
supermicro x9drh-itf	All versions
CPE cpe:2.3:h:supermicro:x9drh-itf:-:::::::* Remediation No remediation found in references.
supermicro x9dri-f	All versions
CPE cpe:2.3:h:supermicro:x9dri-f:-:::::::* Remediation No remediation found in references.
supermicro x9dri-ln4f+	All versions
CPE cpe:2.3:h:supermicro:x9dri-ln4f+:-:::::::* Remediation No remediation found in references.
supermicro x9drl-3f	All versions
CPE cpe:2.3:h:supermicro:x9drl-3f:-:::::::* Remediation No remediation found in references.
supermicro x9drl-ef	All versions
CPE cpe:2.3:h:supermicro:x9drl-ef:-:::::::* Remediation No remediation found in references.
supermicro x9drl-if	All versions
CPE cpe:2.3:h:supermicro:x9drl-if:-:::::::* Remediation No remediation found in references.
supermicro x9drt-f	All versions
CPE cpe:2.3:h:supermicro:x9drt-f:-:::::::* Remediation No remediation found in references.
supermicro x9drt-h6f	All versions
CPE cpe:2.3:h:supermicro:x9drt-h6f:-:::::::* Remediation No remediation found in references.
supermicro x9drt-h6ibff	All versions
CPE cpe:2.3:h:supermicro:x9drt-h6ibff:-:::::::* Remediation No remediation found in references.
supermicro x9drt-h6ibqf	All versions
CPE cpe:2.3:h:supermicro:x9drt-h6ibqf:-:::::::* Remediation No remediation found in references.
supermicro x9drt-hf+	All versions
CPE cpe:2.3:h:supermicro:x9drt-hf+:-:::::::* Remediation No remediation found in references.
supermicro x9drt-ibff	All versions
CPE cpe:2.3:h:supermicro:x9drt-ibff:-:::::::* Remediation No remediation found in references.
supermicro x9drt-ibqf	All versions
CPE cpe:2.3:h:supermicro:x9drt-ibqf:-:::::::* Remediation No remediation found in references.
supermicro x9drw-3ln4f+	All versions
CPE cpe:2.3:h:supermicro:x9drw-3ln4f+:-:::::::* Remediation No remediation found in references.
supermicro x9drw-3tf+	All versions
CPE cpe:2.3:h:supermicro:x9drw-3tf+:-:::::::* Remediation No remediation found in references.
supermicro x9drw-7tpf+	All versions
CPE cpe:2.3:h:supermicro:x9drw-7tpf+:-:::::::* Remediation No remediation found in references.
supermicro x9drw-itpf+	All versions
CPE cpe:2.3:h:supermicro:x9drw-itpf+:-:::::::* Remediation No remediation found in references.
supermicro x9drx+-f	All versions
CPE cpe:2.3:h:supermicro:x9drx+-f:-:::::::* Remediation No remediation found in references.
supermicro x9qr7-tf	All versions
CPE cpe:2.3:h:supermicro:x9qr7-tf:-:::::::* Remediation No remediation found in references.
supermicro x9qr7-tf+	All versions
CPE cpe:2.3:h:supermicro:x9qr7-tf+:-:::::::* Remediation No remediation found in references.
supermicro x9qr7-tf-jbod	All versions
CPE cpe:2.3:h:supermicro:x9qr7-tf-jbod:-:::::::* Remediation No remediation found in references.
supermicro x9qri-f	All versions
CPE cpe:2.3:h:supermicro:x9qri-f:-:::::::* Remediation No remediation found in references.
supermicro x9qri-f+	All versions
CPE cpe:2.3:h:supermicro:x9qri-f+:-:::::::* Remediation No remediation found in references.
supermicro x9sbaa-f	All versions
CPE cpe:2.3:h:supermicro:x9sbaa-f:-:::::::* Remediation No remediation found in references.
supermicro x9sca-f	All versions
CPE cpe:2.3:h:supermicro:x9sca-f:-:::::::* Remediation No remediation found in references.
supermicro x9scd-f	All versions
CPE cpe:2.3:h:supermicro:x9scd-f:-:::::::* Remediation No remediation found in references.
supermicro x9sce-f	All versions
CPE cpe:2.3:h:supermicro:x9sce-f:-:::::::* Remediation No remediation found in references.
supermicro x9scff-f	All versions
CPE cpe:2.3:h:supermicro:x9scff-f:-:::::::* Remediation No remediation found in references.
supermicro x9sci-ln4f	All versions
CPE cpe:2.3:h:supermicro:x9sci-ln4f:-:::::::* Remediation No remediation found in references.
supermicro x9scl+-f	All versions
CPE cpe:2.3:h:supermicro:x9scl+-f:-:::::::* Remediation No remediation found in references.
supermicro x9scl-f	All versions
CPE cpe:2.3:h:supermicro:x9scl-f:-:::::::* Remediation No remediation found in references.
supermicro x9scm-f	All versions
CPE cpe:2.3:h:supermicro:x9scm-f:-:::::::* Remediation No remediation found in references.
supermicro x9scm-iif	All versions
CPE cpe:2.3:h:supermicro:x9scm-iif:-:::::::* Remediation No remediation found in references.
supermicro x9spu-f	All versions
CPE cpe:2.3:h:supermicro:x9spu-f:-:::::::* Remediation No remediation found in references.
supermicro x9srd-f	All versions
CPE cpe:2.3:h:supermicro:x9srd-f:-:::::::* Remediation No remediation found in references.
supermicro x9sre-3f	All versions
CPE cpe:2.3:h:supermicro:x9sre-3f:-:::::::* Remediation No remediation found in references.
supermicro x9sre-f	All versions
CPE cpe:2.3:h:supermicro:x9sre-f:-:::::::* Remediation No remediation found in references.
supermicro x9srg-f	All versions
CPE cpe:2.3:h:supermicro:x9srg-f:-:::::::* Remediation No remediation found in references.
supermicro x9sri-3f	All versions
CPE cpe:2.3:h:supermicro:x9sri-3f:-:::::::* Remediation No remediation found in references.
supermicro x9sri-f	All versions
CPE cpe:2.3:h:supermicro:x9sri-f:-:::::::* Remediation No remediation found in references.
supermicro x9srl-f	All versions
CPE cpe:2.3:h:supermicro:x9srl-f:-:::::::* Remediation No remediation found in references.
supermicro x9srw-f	All versions
CPE cpe:2.3:h:supermicro:x9srw-f:-:::::::* Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 15, 2017	CVE Modified	[email protected]
Nov 28, 2016	CVE Modified	[email protected]
Sep 9, 2013	Initial Analysis	[email protected]

CVE-2013-3609 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation