CVE-2013-4786Not scored
No description published yet
Vendor not yet named
Not in CISA KEVVendor fix available
98.4%probability of exploitation in the next 30 days
99th percentile
050100
Higher than 99% of scored CVEs
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
Coverage3 articles · 3 outlets
One row per outlet, in order of first report. First in our coverage: Dark Reading, 28 Jul.
Quiet for 12 weekslast report 4 Aug3 articles3 outlets
- Tue 28 Jul, 21:41 UTC. Dark Reading, first report. 24,000+ BMCs exposed by 20 year old CVE-2013-4786 flaw.
- Mon 3 Aug, 15:21 UTC. SecurityOnline, its first report on the story. BMCs Leak Password Hashes via CVE-2013-4786, Threatening Cloud AI.
- Tue 4 Aug, 10:09 UTC. SecurityWeek, its first report on the story. CVE-2013-4786 flaw puts thousands of servers at risk.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 28 Jul 21:41 | Dark Reading | 24,000+ BMCs exposed by 20 year old CVE-2013-4786 flaw |
| 3 Aug 15:21 | SecurityOnline | BMCs Leak Password Hashes via CVE-2013-4786, Threatening Cloud AI |
| 4 Aug 10:09 | SecurityWeek | CVE-2013-4786 flaw puts thousands of servers at risk |
- 24,000+ BMCs exposed by 20 year old CVE-2013-4786 flawDark Reading · first in our coverage
New articles also arrive in the RSS feed.