CVE-2013-6718

Status: ModifiedMedium (6.4)—

The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account names and passwords via use of an unspecified interface.

CVSS

Version: 2.0
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Base score: 6.4

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 1.33%
Percentile among all scored CVEs: 70
Score date: 10/6/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

IBM — Advanced Management Module Firmware

CWEs

CWE-310

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2013-6718",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-12-01T04:31:49.707",
  "references": [
    {
      "url": "http://osvdb.org/100397",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/55921",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_bladecenter_advanced_management_module_account_information_exposure_cve_2013_6718",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/64032",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89174",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://osvdb.org/100397",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/55921",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_bladecenter_advanced_management_module_account_information_exposure_cve_2013_6718",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/64032",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89174",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account names and passwords via use of an unspecified interface."
    },
    {
      "lang": "es",
      "value": "Advanced Management Module (AMM) con firmware 3.64B, 3.64C, y 3.64G para sistemas IBM BladeCenter permite a atacantes remotos descubrir nombres de cuentas y contraseñas a través del uso de una interfaz no especificada."
    }
  ],
  "lastModified": "2026-06-17T00:00:51.100",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64b:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B9ADAF5-AF4E-4D93-A789-6B033C90022C"
            },
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64c:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B894BA62-335F-4269-8C82-74762282B02C"
            },
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64g:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B394200-3A01-4F0A-BE36-CAE7566FE50F"
            },
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64b:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07E9F9DB-A8EF-48A1-9718-7A5E53529B2F"
            },
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64c:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CE83495-4D09-4F01-A207-B9BDC9877E62"
            },
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64g:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A101BE4-64D3-4E16-84E5-38A59C9890AB"
            },
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64b:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "319BC24F-C66C-4E34-B020-37AC7E39C433"
            },
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64c:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97CA149A-68FC-4723-810A-97236AFD6B7B"
            },
            {
              "criteria": "cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64g:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41535039-EDE0-4957-8762-50B46C36884B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}