Supermicro IPMI Web Interface Unspecified Remote Arbitrary Shell Command Injection

BID:62097

Info

Supermicro IPMI Web Interface Unspecified Remote Arbitrary Shell Command Injection

Bugtraq ID: 62097
Class: Input Validation Error
CVE: CVE-2013-3608
Remote: Yes
Local: No
Published: Aug 30 2013 12:00AM
Updated: Sep 09 2016 03:00PM
Credit: J. Alex Halderman
Vulnerable: Super Micro Computer Supermicro X9SRL-F
Super Micro Computer Supermicro X9SRi-F
Super Micro Computer Supermicro X9SRi-3F
Super Micro Computer Supermicro X9SRG-F
Super Micro Computer Supermicro X9SRE-F
Super Micro Computer Supermicro X9SRE-3F
Super Micro Computer Supermicro X9SRD-F
Super Micro Computer Supermicro X9SPU-F
Super Micro Computer Supermicro X9SCM-iiF
Super Micro Computer Supermicro X9SCM-F
Super Micro Computer Supermicro X9SCL-F
Super Micro Computer Supermicro X9SCL+-F
Super Micro Computer Supermicro X9SCI-LN4F
Super Micro Computer Supermicro X9SCFF-F
Super Micro Computer Supermicro X9SCE-F
Super Micro Computer Supermicro X9SCD-F
Super Micro Computer Supermicro X9SCA-F
Super Micro Computer Supermicro X9SBAA-F
Super Micro Computer Supermicro X9QRi-F+
Super Micro Computer Supermicro X9QRi-F
Super Micro Computer Supermicro X9QR7-TF-JBOD
Super Micro Computer Supermicro X9QR7-TF+
Super Micro Computer Supermicro X9QR7-TF
Super Micro Computer Supermicro X9DRX+-F
Super Micro Computer Supermicro X9DRW-iTPF
Super Micro Computer Supermicro X9DRW-7TPF+
Super Micro Computer Supermicro X9DRW-3TF+
Super Micro Computer Supermicro X9DRW-3LN4F+
Super Micro Computer Supermicro X9DRT-IBQF
Super Micro Computer Supermicro X9DRT-IBFF
Super Micro Computer Supermicro X9DRT-HF+
Super Micro Computer Supermicro X9DRT-H6IBQF
Super Micro Computer Supermicro X9DRT-H6IBFF
Super Micro Computer Supermicro X9DRT-H6F
Super Micro Computer Supermicro X9DRT-F
Super Micro Computer Supermicro X9DRL-iF
Super Micro Computer Supermicro X9DRL-EF
Super Micro Computer Supermicro X9DRL-3F
Super Micro Computer Supermicro X9DRi-LN4F+
Super Micro Computer Supermicro X9DRi-F
Super Micro Computer Supermicro X9DRH-iTF
Super Micro Computer Supermicro X9DRH-iF
Super Micro Computer Supermicro X9DRH-7TF
Super Micro Computer Supermicro X9DRH-7F
Super Micro Computer Supermicro X9DRG-HTF+
Super Micro Computer Supermicro X9DRG-HTF
Super Micro Computer Supermicro X9DRG-HF+
Super Micro Computer Supermicro X9DRG-HF
Super Micro Computer Supermicro X9DRFR
Super Micro Computer Supermicro X9DRFF-iTG+
Super Micro Computer Supermicro X9DRFF-iT+
Super Micro Computer Supermicro X9DRFF-iG+
Super Micro Computer Supermicro X9DRFF-i+
Super Micro Computer Supermicro X9DRFF-7TG+
Super Micro Computer Supermicro X9DRFF-7T+
Super Micro Computer Supermicro X9DRFF-7G+
Super Micro Computer Supermicro X9DRFF-7+
Super Micro Computer Supermicro X9DRFF-7
Super Micro Computer Supermicro X9DRFF
Super Micro Computer Supermicro X9DRE-TF+
Super Micro Computer Supermicro X9DRE-LN4F
Super Micro Computer Supermicro X9DRD-iF
Super Micro Computer Supermicro X9DRD-EF
Super Micro Computer Supermicro X9DRD-7LN4F-JBOD
Super Micro Computer Supermicro X9DRD-7LN4F
Super Micro Computer Supermicro X9DRD-7JLN4F
Super Micro Computer Supermicro X9DR7-TF+
Super Micro Computer Supermicro X9DR7-LN4F-JBOD
Super Micro Computer Supermicro X9DR7-LN4F
Super Micro Computer Supermicro X9DR3-LN4F+
Super Micro Computer Supermicro X9DR3-F
Super Micro Computer Supermicro X9DBU-iF
Super Micro Computer Supermicro X9DBU-3F
Super Micro Computer Supermicro X9DBL-iF
Super Micro Computer Supermicro X9DBL-3F
Super Micro Computer Supermicro X9DBi-TPF
Super Micro Computer Supermicro X9DBi-F
Super Micro Computer Supermicro X9DB3-TPF
Super Micro Computer Supermicro X9DB3-F
Super Micro Computer Supermicro X9DAX-iTF
Super Micro Computer Supermicro X9DAX-iF-HFT
Super Micro Computer Supermicro X9DAX-iF
Super Micro Computer Supermicro X9DAX-7TF
Super Micro Computer Supermicro X9DAX-7F-HFT
Super Micro Computer Supermicro X9DAX-7F
Super Micro Computer Supermicro X8SIU-F
Super Micro Computer Supermicro X8SIT-HF
Super Micro Computer Supermicro X8SIT-F
Super Micro Computer Supermicro X8SIL-F
Super Micro Computer Supermicro X8SIE-LN4F
Super Micro Computer Supermicro X8SIE-F
Super Micro Computer Supermicro X8SIA-F
Super Micro Computer Supermicro X8SI6-F
Super Micro Computer Supermicro X8DTU-LN4F+-LR
Super Micro Computer Supermicro X8DTU-LN4F+
Super Micro Computer Supermicro X8DTU-6TF+-LR
Super Micro Computer Supermicro X8DTU-6TF+
Super Micro Computer Supermicro X8DTU-6F+-LR
Super Micro Computer Supermicro X8DTU-6F+
Super Micro Computer Supermicro X8DTN+-F-LR
Super Micro Computer Supermicro X8DTN+-F
Super Micro Computer Supermicro X8DTL-IF
Super Micro Computer Supermicro X8DTL-6F
Super Micro Computer Supermicro X8DTL-3F
Super Micro Computer Supermicro X7SPT-DF-D525+
Super Micro Computer Supermicro X7SPT-DF-D525
Super Micro Computer Supermicro X7SPE-HF-D525
Super Micro Computer Supermicro X7SPE-HF
Super Micro Computer Supermicro X7SPE-H-D525
Super Micro Computer Supermicro X7SPA-HF-D525
Super Micro Computer Supermicro X7SPA-HF
Super Micro Computer Supermicro H8SML-iF
Super Micro Computer Supermicro H8SML-i
Super Micro Computer Supermicro H8SML-7F
Super Micro Computer Supermicro H8SML-7
Super Micro Computer Supermicro H8SME-F
Super Micro Computer Supermicro H8SGL-F
Super Micro Computer Supermicro H8SCM-F
Super Micro Computer Supermicro H8DGU-LN4F+
Super Micro Computer Supermicro H8DGU-F
Super Micro Computer Supermicro H8DGT-HLIBQF
Super Micro Computer Supermicro H8DGT-HLF
Super Micro Computer Supermicro H8DGT-HIBQF
Super Micro Computer Supermicro H8DGT-HF
Super Micro Computer Supermicro H8DGi-F
Super Micro Computer Supermicro H8DGG-QF
Super Micro Computer Supermicro H8DG6-F
Super Micro Computer Supermicro H8DCT-IBQF
Super Micro Computer Supermicro H8DCT-HLN4F
Super Micro Computer Supermicro H8DCT-HIBQF
Super Micro Computer Supermicro H8DCT-F
Super Micro Computer Supermicro H8DCL-iF
Super Micro Computer Supermicro H8DCL-6F
Citrix NetScaler T1 0
Citrix NetScaler Service Delivery Appliance 0
Citrix NetScaler Gateway 0
Citrix NetScaler Application Delivery Controller (ADC) 0
Citrix Command Center Appliance 0
Citrix CloudBridge 0
Not Vulnerable:

Discussion

Supermicro IPMI Web Interface Unspecified Remote Arbitrary Shell Command Injection

Supermicro IPMI Web Interface is prone to an unspecified remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.

Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user.

Exploit / POC

Supermicro IPMI Web Interface Unspecified Remote Arbitrary Shell Command Injection

An attacker can exploit this issue using readily available tools.

Solution / Fix

Supermicro IPMI Web Interface Unspecified Remote Arbitrary Shell Command Injection

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

References

Supermicro IPMI Web Interface Unspecified Remote Arbitrary Shell Command Injection

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report