CVE-2013-4031: ibm bladecenter Credentials Management Errors
Vulnerability summary
CVE-2013-4031 is a high (CVSS 10.0) Credentials Management Errors vulnerability in ibm bladecenter. EPSS estimates a 2.03% chance of exploitation in the next 30 days, higher than 80.7% of scored vulnerabilities.
Timeline
- 09-08-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.03%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
-0.02 pp
From 2.04% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm30 products
- bladecenterhs22 | hs22v | hs23 | hs23e | hx5
- flex_system_x220_compute_nodena
- flex_system_x240_compute_nodena
- flex_system_x440_compute_nodena
- system_x_idataplex_dx360_m2_serverna
1 vendor · 30 products