« Volver al listado

CVE-2013-4784

Estado: ModificadaAlta (10)—💥 PoC

The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

⚠️ Las pruebas de concepto de GitHub no están verificadas: algunas son falsas o contienen malware. No las ejecute nunca fuera de un laboratorio aislado.

Tecnologías afectadas (1)

HP — Integrated Lights-out BMC

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4784",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-07-08T22:55:01.170",
  "references": [
    {
      "url": "http://fish2.com/ipmi/cipherzero.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/show/osvdb/93040",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.wired.com/threatlevel/2013/07/ipmi/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85569",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://fish2.com/ipmi/cipherzero.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/show/osvdb/93040",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.wired.com/threatlevel/2013/07/ipmi/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85569",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password."
    },
    {
      "lang": "es",
      "value": "El HP Integrated Lights-Out (iLO) implementacion de BMC permite a atacantes remotos evitar la autenticación y ejecutar comandos IPMI mediante el uso de cifrado Suite 0 (también conocido como cifra cero) y una contraseña arbitraria."
    }
  ],
  "lastModified": "2026-06-16T23:57:53.390",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:integrated_lights-out_bmc:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFB1B75A-D92A-4449-ADB3-F906BE13120B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}