Database/Firmware, BMC & network fabric
Supermicro BMC (IPMI cipher suite 0): Authentication bypass
CVE-2013-4782Firmware, BMC & network fabriccurated
Impact
Authentication bypass — arbitrary IPMI commands with any password when cipher suite 0 is enabled. Still shipped enabled on some ODM builds a decade later
Who can reach it
Network / IPMI over LAN
What to do
Disable cipher suite 0 in BMC config fleet-wide and assert it in a config scan; not fixable by firmware alone since it is a spec-permitted mode
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.