Unrated severityNVD Advisory· Published Jul 8, 2013· Updated Apr 29, 2026

CVE-2013-4782

Description

The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

Affected products

Supermicro/Bmc
cpe:2.3:h:supermicro:bmc:*:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

fish2.com/ipmi/cipherzero.htmlnvd
osvdb.org/show/osvdb/93038nvd
www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zeronvd
www.wired.com/threatlevel/2013/07/ipmi/nvd
lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.053
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000