CVE-2013-4031
First published: Fri Aug 09 2013(Updated: )
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM BladeCenter | =hs22 | |
| IBM BladeCenter | =hs22v | |
| IBM BladeCenter | =hs23 | |
| IBM BladeCenter | =hs23e | |
| IBM BladeCenter | =hx5 | |
| IBM Flex System X220 Compute Node | ||
| IBM Flex System X240 | ||
| IBM Flex System X440 | ||
| Lenovo System X Idataplex Dx360 M2 Firmware | ||
| IBM System X iDataPlex DX360 M3 Server | ||
| IBM iDataplex Dx360 M4 | ||
| Ibm System X3100 M4 Firmware | ||
| IBM System X3200 M3 | ||
| IBM System X3250 M3 | ||
| IBM System X3250 M4 Firmware | ||
| IBM System X3400 M2 | ||
| Lenovo System X3400 M3 | ||
| Lenovo System X3500 M2 | ||
| Lenovo System X3500 M3 | ||
| Lenovo System X3500 M4 Firmware | ||
| Lenovo System X3530 M4 | ||
| Lenovo System X3560 M2 | ||
| Lenovo System X3550 M3 Firmware | ||
| Lenovo System X3550 M4 | ||
| IBM System X3620 M3 | ||
| Lenovo System X3630 M3 | ||
| Lenovo System X3630 M4 | ||
| IBM System X3650 M2 | ||
| Lenovo System X3650 M3 Firmware | ||
| IBM System x3650 M4 Firmware | ||
| Lenovo System X3690 X5 Firmware | ||
| Lenovo System X3750 M4 | ||
| Lenovo System X3850 X5 | ||
| Lenovo System X3950 X5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-4031?
CVE-2013-4031 is considered a high-severity vulnerability due to the default password for the IPMI user account.
How do I fix CVE-2013-4031?
To mitigate CVE-2013-4031, change the default password for the IPMI user account immediately.
Which IBM systems are affected by CVE-2013-4031?
CVE-2013-4031 affects various IBM BladeCenter, Flex System, System x iDataPlex, and System x servers.
What type of vulnerability is CVE-2013-4031?
CVE-2013-4031 is a credential management vulnerability related to the default IPMI user account.
Is CVE-2013-4031 being actively exploited?
There are no specific reports of active exploitation of CVE-2013-4031, but the presence of a default password poses security risks.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm bladecenter
- version/ibm bladecenter/hs22
- version/ibm bladecenter/hs22v
- version/ibm bladecenter/hs23
- version/ibm bladecenter/hs23e
- version/ibm bladecenter/hx5
- canonical/ibm flex system x220 compute node
- canonical/ibm flex system x240
- canonical/ibm flex system x440
- canonical/lenovo system x idataplex dx360 m2 firmware
- canonical/ibm system x idataplex dx360 m3 server
- canonical/ibm idataplex dx360 m4
- canonical/ibm system x3100 m4 firmware
- canonical/ibm system x3200 m3
- canonical/ibm system x3250 m3
- canonical/ibm system x3250 m4 firmware
- canonical/ibm system x3400 m2
- canonical/lenovo system x3400 m3
- canonical/lenovo system x3500 m2
- canonical/lenovo system x3500 m3
- canonical/lenovo system x3500 m4 firmware
- canonical/lenovo system x3530 m4
- canonical/lenovo system x3560 m2
- canonical/lenovo system x3550 m3 firmware
- canonical/lenovo system x3550 m4
- canonical/ibm system x3620 m3
- canonical/lenovo system x3630 m3
- canonical/lenovo system x3630 m4
- canonical/ibm system x3650 m2
- canonical/lenovo system x3650 m3 firmware
- canonical/ibm system x3650 m4 firmware
- canonical/lenovo system x3690 x5 firmware
- canonical/lenovo system x3750 m4
- canonical/lenovo system x3850 x5
- canonical/lenovo system x3950 x5