Detections
Analytics

CVE-2013-4786

high

Description

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.

References

https://www.securityweek.com/decades-old-bmc-vulnerability-exposes-thousands-of-data-centers-to-attacks/

https://hackread.com/ipmi-flaw-exposes-servers-offline-password-cracking/

https://www.helpnetsecurity.com/2026/07/28/exposed-bmc-ipmi-vulnerability-research/

https://www.darkreading.com/cyber-risk/flaw-exposes-data-centers-server-takeover

https://www.bleepingcomputer.com/news/security/over-24-000-exposed-server-bmcs-leak-password-hash-via-decades-old-flaw/

https://thehackernews.com/2026/07/24650-internet-exposed-bmcs-disclose.html

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04197764

https://security.netapp.com/advisory/ntap-20190919-0005/

https://nvidia.custhelp.com/app/answers/detail/a_id/5010

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

http://marc.info/?l=bugtraq&m=139653661621384&w=2

http://fish2.com/ipmi/remote-pw-cracking.html

Details

Source: Mitre, NVD

Published: 2013-07-08

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.7857

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability Being Monitored