CVE-2013-4037
Estado: ModificadaMedia (4.3)—
The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.95%
- Percentil entre todas las CVEs puntuadas: 60
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (30)
IBM — BladecenterIBM — Flex System X220 Compute NodeIBM — Flex System X240 Compute NodeIBM — Flex System X440 Compute NodeIBM — System X3100 M4IBM — System X3200 M3IBM — System X3250 M3IBM — System X3250 M4IBM — System X3400 M2IBM — System X3400 M3IBM — System X3500 M2IBM — System X3500 M3IBM — System X3500 M4IBM — System X3530 M4IBM — System X3550 M2IBM — System X3550 M3IBM — System X3550 M4IBM — System X3620 M3IBM — System X3630 M3IBM — System X3630 M4IBM — System X3650 M2IBM — System X3650 M3IBM — System X3650 M4IBM — System X3690 X5IBM — System X3750 M4IBM — System X3850 X5IBM — System X3950 X5IBM — System X Idataplex Dx360 M2 ServerIBM — System X Idataplex Dx360 M3 ServerIBM — System X Idataplex Dx360 M4 Server
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-4037",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-08-09T23:55:02.863",
"references": [
{
"url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86173",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86173",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack."
},
{
"lang": "es",
"value": "El protocolo RAKP soportado en la implementación Intelligent Platform Management Interface (IPMI) en Integrated Management Module (IMM) y Integrated Management Module II (IMM2) en servidores IBM BladeCenter, Flex System, System x iDataPlex, and System x3###, envía una contraseña hash al cliente, lo que hace que sea más fácil para los atacantes remotos obtener acceso a través de un ataque de fuerza bruta."
}
],
"lastModified": "2026-06-16T23:56:17.027",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hs22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1052332C-2892-4E69-8180-305039D6AF20"
},
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hs22v:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1245D63B-4A91-4934-8DD8-49B4A10F33A0"
},
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hs23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A633BBA0-4330-41DE-AAAE-D568D9E7442D"
},
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hs23e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8644F48F-5032-48CB-B921-0CCC8E233347"
},
{
"criteria": "cpe:2.3:h:ibm:bladecenter:hx5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "929B68CB-91CD-40EB-87A0-BD66E25922E7"
},
{
"criteria": "cpe:2.3:h:ibm:flex_system_x220_compute_node:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0DCE85E-FB2D-49D4-863F-5D3458A674D5"
},
{
"criteria": "cpe:2.3:h:ibm:flex_system_x240_compute_node:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BF9E83E-9526-49EC-8B32-4E896C1DFD54"
},
{
"criteria": "cpe:2.3:h:ibm:flex_system_x440_compute_node:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB89722F-2C12-49A8-9A6E-02842EBF77B3"
},
{
"criteria": "cpe:2.3:h:ibm:system_x_idataplex_dx360_m2_server:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD5F6076-DF5F-44E0-8CCF-BD1A9E2FE5C0"
},
{
"criteria": "cpe:2.3:h:ibm:system_x_idataplex_dx360_m3_server:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ED62921-B746-41DC-951F-4BD80EC32A88"
},
{
"criteria": "cpe:2.3:h:ibm:system_x_idataplex_dx360_m4_server:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E4ABB5B-C1F0-4FEE-9879-3F9E023D5AA6"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3100_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B66DB82A-0FF6-452B-8B11-239BF391AD12"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3200_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E87D7B9E-BDD0-41D8-9A2B-CE989FA3888B"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3250_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A3CD99D-F823-49A9-A9F4-6DE615358447"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3250_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3672040-7C51-4C83-A62C-096B2B0E5289"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3400_m2:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6F09E64-4A8E-4C24-8699-ED0D4CD5BBD7"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3400_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1890F42C-E455-4D81-86BA-E7E5E1B8D295"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3500_m2:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69ED256E-420A-42D7-B5EC-301097A4020F"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3500_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02507B59-A854-43B1-B14D-E0CEA10FF62A"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3500_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F943B01A-635B-4F62-96DE-715FFA007AA9"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3530_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DAFFBE1-E343-4DCB-A44D-2E29C547CC28"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3550_m2:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "247AFC7C-CAF6-46C5-82A4-7DF045C2E9D7"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3550_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6E33754-643B-41FD-A751-4E1A029EFBD8"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3550_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98F407F5-EF7C-4F65-8978-3FB80CB07C06"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3620_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5160AA6-DF5F-4247-BEA6-F17AC1667FA8"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3630_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F76C31D7-C2FF-4DAA-88DB-99EFE7E0BA83"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3630_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3B656E6-B70F-49AB-B17C-F89849CA516E"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3650_m2:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C58073F4-505F-466B-A2F2-B13B70F3A78F"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3650_m3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CE88C85-1397-447D-9352-9609571E62B0"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3650_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "521ED7F3-84FD-4D6C-9EEE-83A52734602A"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3690_x5:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3230D6FE-71DC-474E-94FE-0052C94AEFA4"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3750_m4:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "268FEAB9-EEB1-4B00-A086-1185B0A35959"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3850_x5:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06A7021F-5D6E-4FCB-A155-5EDC76B78167"
},
{
"criteria": "cpe:2.3:h:ibm:system_x3950_x5:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86142DE9-2C91-4FCB-9A1B-39AB541C05F5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}