CVE-2013-4031
Estado: ModificadaAlta (10)—
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.03%
- Percentil entre todas las CVEs puntuadas: 80
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (30)
IBM — BladecenterIBM — Flex System X220 Compute NodeIBM — Flex System X240 Compute NodeIBM — Flex System X440 Compute NodeIBM — System X3100 M4IBM — System X3200 M3IBM — System X3250 M3IBM — System X3250 M4IBM — System X3400 M2IBM — System X3400 M3IBM — System X3500 M2IBM — System X3500 M3IBM — System X3500 M4IBM — System X3530 M4IBM — System X3550 M2IBM — System X3550 M3IBM — System X3550 M4IBM — System X3620 M3IBM — System X3630 M3IBM — System X3630 M4IBM — System X3650 M2IBM — System X3650 M3IBM — System X3650 M4IBM — System X3690 X5IBM — System X3750 M4IBM — System X3850 X5IBM — System X3950 X5IBM — System X Idataplex Dx360 M2 ServerIBM — System X Idataplex Dx360 M3 ServerIBM — System X Idataplex Dx360 M4 Server
CWE
- CWE-255
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-4031",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-08-09T23:55:02.840",
"references": [
{
"url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86172",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86172",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-255"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors."
},
{
"lang": "es",
"value": "La implementación Intelligent Platform Management Interface (IPMI) en Integrated Management Module (IMM) y Integrated Management Module II (IMM2) en servidores IBM BladeCenter, Flex System, System x iDataPlex, y System x3### tiene una contraseña predeterminada para una cuenta de usuario IPMI, lo que hace más fácil para los atacantes remotos realizar el encendido, apagado, reinicio, o añadir o modificar las cuentas, a través de vectores no especificados."
}
],
"lastModified": "2026-06-16T23:56:15.250",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hs22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1052332C-2892-4E69-8180-305039D6AF20"
},
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hs22v:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1245D63B-4A91-4934-8DD8-49B4A10F33A0"
},
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hs23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A633BBA0-4330-41DE-AAAE-D568D9E7442D"
},
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hs23e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8644F48F-5032-48CB-B921-0CCC8E233347"
},
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hx5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "929B68CB-91CD-40EB-87A0-BD66E25922E7"
},
{
"criteria": "cpe:2.3:h:ibm:flex_system_x220_compute_node:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0DCE85E-FB2D-49D4-863F-5D3458A674D5"
},
{
"criteria": "cpe:2.3:h:ibm:flex_system_x240_compute_node:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BF9E83E-9526-49EC-8B32-4E896C1DFD54"
},
{
"criteria": "cpe:2.3:h:ibm:flex_system_x440_compute_node:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB89722F-2C12-49A8-9A6E-02842EBF77B3"
},
{
"criteria": "cpe:2.3:h:ibm:system_x_idataplex_dx360_m2_server:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD5F6076-DF5F-44E0-8CCF-BD1A9E2FE5C0"
},
{
"criteria": "cpe:2.3:h:ibm:system_x_idataplex_dx360_m3_server:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ED62921-B746-41DC-951F-4BD80EC32A88"
},
{
"criteria": "cpe:2.3:h:ibm:system_x_idataplex_dx360_m4_server:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E4ABB5B-C1F0-4FEE-9879-3F9E023D5AA6"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3100_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B66DB82A-0FF6-452B-8B11-239BF391AD12"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3200_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E87D7B9E-BDD0-41D8-9A2B-CE989FA3888B"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3250_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A3CD99D-F823-49A9-A9F4-6DE615358447"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3250_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3672040-7C51-4C83-A62C-096B2B0E5289"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3400_m2:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6F09E64-4A8E-4C24-8699-ED0D4CD5BBD7"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3400_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1890F42C-E455-4D81-86BA-E7E5E1B8D295"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3500_m2:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69ED256E-420A-42D7-B5EC-301097A4020F"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3500_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02507B59-A854-43B1-B14D-E0CEA10FF62A"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3500_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F943B01A-635B-4F62-96DE-715FFA007AA9"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3530_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DAFFBE1-E343-4DCB-A44D-2E29C547CC28"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3550_m2:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "247AFC7C-CAF6-46C5-82A4-7DF045C2E9D7"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3550_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6E33754-643B-41FD-A751-4E1A029EFBD8"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3550_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98F407F5-EF7C-4F65-8978-3FB80CB07C06"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3620_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5160AA6-DF5F-4247-BEA6-F17AC1667FA8"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3630_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F76C31D7-C2FF-4DAA-88DB-99EFE7E0BA83"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3630_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3B656E6-B70F-49AB-B17C-F89849CA516E"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3650_m2:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C58073F4-505F-466B-A2F2-B13B70F3A78F"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3650_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CE88C85-1397-447D-9352-9609571E62B0"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3650_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "521ED7F3-84FD-4D6C-9EEE-83A52734602A"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3690_x5:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3230D6FE-71DC-474E-94FE-0052C94AEFA4"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3750_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "268FEAB9-EEB1-4B00-A086-1185B0A35959"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3850_x5:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06A7021F-5D6E-4FCB-A155-5EDC76B78167"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3950_x5:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86142DE9-2C91-4FCB-9A1B-39AB541C05F5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}