CVE-2013-4031: Critical severity IBM BladeCenter vulnerability

Published Aug 9, 2013
·
Updated

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.

Affected Software

34 affected components
IBM BladeCenter=hs22
IBM BladeCenter=hs22v
IBM BladeCenter=hs23
IBM BladeCenter=hs23e
IBM BladeCenter=hx5
IBM Flex System X220 Compute Node
IBM Flex System X240 Compute Node
IBM Flex System X440 Compute Node
IBM System X Idataplex Dx360 M2 Server
IBM System X Idataplex Dx360 M3 Server
IBM System X Idataplex Dx360 M4 Server
IBM System X3100 M4
IBM System X3200 M3
IBM System X3250 M3
IBM System X3250 M4
IBM System X3400 M2
IBM System X3400 M3
IBM System X3500 M2
IBM System X3500 M3
IBM System X3500 M4
IBM System X3530 M4
IBM System X3550 M2
IBM System X3550 M3
IBM System X3550 M4
IBM System X3620 M3
IBM System X3630 M3
IBM System X3630 M4
IBM System X3650 M2
IBM System X3650 M3
IBM System X3650 M4
IBM System X3690 X5
IBM System X3750 M4
IBM System X3850 X5
IBM System X3950 X5

Event History

Aug 9, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2013-4031?

CVE-2013-4031 is considered a high-severity vulnerability due to the default password for the IPMI user account.

2

How do I fix CVE-2013-4031?

To mitigate CVE-2013-4031, change the default password for the IPMI user account immediately.

3

Which IBM systems are affected by CVE-2013-4031?

CVE-2013-4031 affects various IBM BladeCenter, Flex System, System x iDataPlex, and System x servers.

4

What type of vulnerability is CVE-2013-4031?

CVE-2013-4031 is a credential management vulnerability related to the default IPMI user account.

5

Is CVE-2013-4031 being actively exploited?

There are no specific reports of active exploitation of CVE-2013-4031, but the presence of a default password poses security risks.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203