{"id":"CVE-2013-3608","aliases":["EUVD-2013-3542","GHSA-3j43-whpc-237r"],"status":"published","title":"The web interface in the Intelligent Platform Management Interface (IPMI) implementation on...","description":"The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.06413,"percentile":0.93731,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2013-09-08T01:00:00Z","modified":"2026-06-16T23:55:30Z","products":[{"vendor":"supermicro","product":"h8dcl-6f"},{"vendor":"supermicro","product":"h8dcl-if"},{"vendor":"supermicro","product":"h8dct-hibqf"},{"vendor":"supermicro","product":"h8dct-hln4f"},{"vendor":"supermicro","product":"h8dct-ibqf"},{"vendor":"supermicro","product":"h8dg6-f"},{"vendor":"supermicro","product":"h8dgg-qf"},{"vendor":"supermicro","product":"h8dgi-f"},{"vendor":"supermicro","product":"h8dgt-hf"},{"vendor":"supermicro","product":"h8dgt-hibqf"},{"vendor":"supermicro","product":"h8dgt-hlf"},{"vendor":"supermicro","product":"h8dgt-hlibqf"},{"vendor":"supermicro","product":"h8dgu-f"},{"vendor":"supermicro","product":"h8dgu-ln4f\\+"},{"vendor":"supermicro","product":"h8scm-f"},{"vendor":"supermicro","product":"h8sgl-f"},{"vendor":"supermicro","product":"h8sme-f"},{"vendor":"supermicro","product":"h8sml-7"},{"vendor":"supermicro","product":"h8sml-7f"},{"vendor":"supermicro","product":"h8sml-i"},{"vendor":"supermicro","product":"h8sml-if"},{"vendor":"supermicro","product":"x7spa-hf"},{"vendor":"supermicro","product":"x7spa-hf-d525"},{"vendor":"supermicro","product":"x7spe-h-d525"},{"vendor":"supermicro","product":"x7spe-hf"},{"vendor":"supermicro","product":"x7spe-hf-d525"},{"vendor":"supermicro","product":"x7spt-df-d525"},{"vendor":"supermicro","product":"x7spt-df-d525\\+"},{"vendor":"supermicro","product":"x8dtl-3f"},{"vendor":"supermicro","product":"x8dtl-6f"},{"vendor":"supermicro","product":"x8dtl-if"},{"vendor":"supermicro","product":"x8dtn\\+-f"},{"vendor":"supermicro","product":"x8dtn\\+-f-lr"},{"vendor":"supermicro","product":"x8dtu-6f\\+"},{"vendor":"supermicro","product":"x8dtu-6f\\+-lr"},{"vendor":"supermicro","product":"x8dtu-6tf\\+"},{"vendor":"supermicro","product":"x8dtu-6tf\\+-lr"},{"vendor":"supermicro","product":"x8dtu-ln4f\\+"},{"vendor":"supermicro","product":"x8dtu-ln4f\\+-lr"},{"vendor":"supermicro","product":"x8si6-f"},{"vendor":"supermicro","product":"x8sia-f"},{"vendor":"supermicro","product":"x8sie-f"},{"vendor":"supermicro","product":"x8sie-ln4f"},{"vendor":"supermicro","product":"x8sil-f"},{"vendor":"supermicro","product":"x8sit-f"},{"vendor":"supermicro","product":"x8sit-hf"},{"vendor":"supermicro","product":"x8siu-f"},{"vendor":"supermicro","product":"x9dax-7f"},{"vendor":"supermicro","product":"x9dax-7f-hft"},{"vendor":"supermicro","product":"x9dax-7tf"},{"vendor":"supermicro","product":"x9dax-if"},{"vendor":"supermicro","product":"x9dax-if-hft"},{"vendor":"supermicro","product":"x9dax-itf"},{"vendor":"supermicro","product":"x9db3-f"},{"vendor":"supermicro","product":"x9db3-tpf"},{"vendor":"supermicro","product":"x9dbi-f"},{"vendor":"supermicro","product":"x9dbi-tpf"},{"vendor":"supermicro","product":"x9dbl-3f"},{"vendor":"supermicro","product":"x9dbl-if"},{"vendor":"supermicro","product":"x9dbu-3f"},{"vendor":"supermicro","product":"x9dbu-if"},{"vendor":"supermicro","product":"x9dr3-f"},{"vendor":"supermicro","product":"x9dr3-ln4f\\+"},{"vendor":"supermicro","product":"x9dr7-ln4f"},{"vendor":"supermicro","product":"x9dr7-ln4f-jbod"},{"vendor":"supermicro","product":"x9dr7-tf\\+"},{"vendor":"supermicro","product":"x9drd-7jln4f"},{"vendor":"supermicro","product":"x9drd-7ln4f"},{"vendor":"supermicro","product":"x9drd-7ln4f-jbod"},{"vendor":"supermicro","product":"x9drd-ef"},{"vendor":"supermicro","product":"x9drd-if"},{"vendor":"supermicro","product":"x9dre-ln4f"},{"vendor":"supermicro","product":"x9dre-tf\\+"},{"vendor":"supermicro","product":"x9drff"},{"vendor":"supermicro","product":"x9drff-7"},{"vendor":"supermicro","product":"x9drff-7\\+"},{"vendor":"supermicro","product":"x9drff-7g\\+"},{"vendor":"supermicro","product":"x9drff-7t\\+"},{"vendor":"supermicro","product":"x9drff-7tg\\+"},{"vendor":"supermicro","product":"x9drff-i\\+"},{"vendor":"supermicro","product":"x9drff-ig\\+"},{"vendor":"supermicro","product":"x9drff-it\\+"},{"vendor":"supermicro","product":"x9drff-itg\\+"},{"vendor":"supermicro","product":"x9drfr"},{"vendor":"supermicro","product":"x9drg-hf"},{"vendor":"supermicro","product":"x9drg-hf\\+"},{"vendor":"supermicro","product":"x9drg-htf"},{"vendor":"supermicro","product":"x9drg-htf\\+"},{"vendor":"supermicro","product":"x9drh-7f"},{"vendor":"supermicro","product":"x9drh-7tf"},{"vendor":"supermicro","product":"x9drh-if"},{"vendor":"supermicro","product":"x9drh-itf"},{"vendor":"supermicro","product":"x9dri-f"},{"vendor":"supermicro","product":"x9dri-ln4f\\+"},{"vendor":"supermicro","product":"x9drl-3f"},{"vendor":"supermicro","product":"x9drl-ef"},{"vendor":"supermicro","product":"x9drl-if"},{"vendor":"supermicro","product":"x9drt-f"},{"vendor":"supermicro","product":"x9drt-h6f"},{"vendor":"supermicro","product":"x9drt-h6ibff"},{"vendor":"supermicro","product":"x9drt-h6ibqf"},{"vendor":"supermicro","product":"x9drt-hf\\+"},{"vendor":"supermicro","product":"x9drt-ibff"},{"vendor":"supermicro","product":"x9drt-ibqf"},{"vendor":"supermicro","product":"x9drw-3ln4f\\+"},{"vendor":"supermicro","product":"x9drw-3tf\\+"},{"vendor":"supermicro","product":"x9drw-7tpf\\+"},{"vendor":"supermicro","product":"x9drw-itpf\\+"},{"vendor":"supermicro","product":"x9drx\\+-f"},{"vendor":"supermicro","product":"x9qr7-tf"},{"vendor":"supermicro","product":"x9qr7-tf-jbod"},{"vendor":"supermicro","product":"x9qr7-tf\\+"},{"vendor":"supermicro","product":"x9qri-f"},{"vendor":"supermicro","product":"x9qri-f\\+"},{"vendor":"supermicro","product":"x9sbaa-f"},{"vendor":"supermicro","product":"x9sca-f"},{"vendor":"supermicro","product":"x9scd-f"},{"vendor":"supermicro","product":"x9sce-f"},{"vendor":"supermicro","product":"x9scff-f"},{"vendor":"supermicro","product":"x9sci-ln4f"},{"vendor":"supermicro","product":"x9scl-f"},{"vendor":"supermicro","product":"x9scl\\+-f"},{"vendor":"supermicro","product":"x9scm-f"},{"vendor":"supermicro","product":"x9scm-iif"},{"vendor":"supermicro","product":"x9spu-f"},{"vendor":"supermicro","product":"x9srd-f"},{"vendor":"supermicro","product":"x9sre-3f"},{"vendor":"supermicro","product":"x9sre-f"},{"vendor":"supermicro","product":"x9srg-f"},{"vendor":"supermicro","product":"x9sri-3f"},{"vendor":"supermicro","product":"x9sri-f"},{"vendor":"supermicro","product":"x9srl-f"},{"vendor":"supermicro","product":"x9srw-f"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/648646","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/62097","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.thomas-krenn.com/en/wiki/Supermicro_IPMI_Security_Updates_November_2013","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.citrix.com/article/CTX216642","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3608"},{"url":"https://github.com/advisories/GHSA-3j43-whpc-237r"}],"sources":{"cve":[{"id":"CVE-2013-3608","description":"The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.","status":"published","published":"2013-09-08T01:00:00Z","modified":"2024-08-06T16:14:56.542Z","updated_at":"2026-11-02T14:34:56.872243Z"}],"euvd":[{"id":"EUVD-2013-3542","description":"The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.","status":"published","published":"2013-09-08T01:00:00Z","modified":"2024-08-06T16:14:56Z","updated_at":"2026-11-03T01:56:34.623989Z"}],"ghsa":[{"id":"GHSA-3j43-whpc-237r","title":"The web interface in the Intelligent Platform Management Interface (IPMI) implementation on...","description":"The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.","status":"published","published":"2022-05-17T00:24:32Z","modified":"2023-02-03T05:01:41Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:53:01.625617Z"}],"nvd":[{"id":"CVE-2013-3608","description":"The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.","status":"published","published":"2013-09-08T03:17:39.587Z","modified":"2026-06-16T23:55:30.343Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:35.248411Z"}]}}