kbrain

CVE-2013-3609

HIGH · CVSS 10.0EPSS 5.3%EU EUVD

The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices relies on JavaScript code on the client for authorization checks, which allows remote authenticated users to bypass intended access restrictions via a crafted request, related to the PrivilegeCallBack function.

Key facts

CVSS score
10.0 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-20
EPSS score
5.3% (93th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2013-3543)
Published
September 8, 2013
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2013-3543 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

  • supermicro / h8dcl-6f
  • supermicro / h8dcl-if
  • supermicro / h8dct-hibqf
  • supermicro / h8dct-hln4f
  • supermicro / h8dct-ibqf
  • supermicro / h8dg6-f
  • supermicro / h8dgg-qf
  • supermicro / h8dgi-f
  • supermicro / h8dgt-hf
  • supermicro / h8dgt-hibqf
  • supermicro / h8dgt-hlf
  • supermicro / h8dgt-hlibqf
  • supermicro / h8dgu-f
  • supermicro / h8dgu-ln4f+
  • supermicro / h8scm-f
  • supermicro / h8sgl-f
  • supermicro / h8sme-f
  • supermicro / h8sml-7
  • supermicro / h8sml-7f
  • supermicro / h8sml-i
  • supermicro / h8sml-if
  • supermicro / x7spa-hf
  • supermicro / x7spa-hf-d525
  • supermicro / x7spe-h-d525
  • supermicro / x7spe-hf
  • supermicro / x7spe-hf-d525
  • supermicro / x7spt-df-d525
  • supermicro / x7spt-df-d525+
  • supermicro / x8dtl-3f
  • supermicro / x8dtl-6f
  • supermicro / x8dtl-if
  • supermicro / x8dtn+-f
  • supermicro / x8dtn+-f-lr
  • supermicro / x8dtu-6f+
  • supermicro / x8dtu-6f+-lr
  • supermicro / x8dtu-6tf+
  • supermicro / x8dtu-6tf+-lr
  • supermicro / x8dtu-ln4f+
  • supermicro / x8dtu-ln4f+-lr
  • supermicro / x8si6-f
  • supermicro / x8sia-f
  • supermicro / x8sie-f
  • supermicro / x8sie-ln4f
  • supermicro / x8sil-f
  • supermicro / x8sit-f
  • supermicro / x8sit-hf
  • supermicro / x8siu-f
  • supermicro / x9dax-7f
  • supermicro / x9dax-7f-hft
  • supermicro / x9dax-7tf

and 83 more…

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain