CVE-2013-4786: intel intelligent_platform_management_interface Credentials Management Errors

Modified

Published 08-07-2013Last modified 09-10-2026

Vulnerability summary

CVE-2013-4786 is a high (CVSS 7.8) Credentials Management Errors vulnerability in intel intelligent_platform_management_interface. EPSS estimates a 98.39% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 02-07-2013)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v2.0 (NVD)

EPSS score

98.39%

0%100%

Critical · +19.82 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2exploit-database, metasploit

Timeline

08-07-2013
PublishedVulnerability first disclosed.
09-10-2026
Last modifiedVulnerability information updated.

Description

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.

CVSS metrics

2 scores · 1 source · 2 versions

v3.07.5v2.07.8

EPSS trend

Probability

98.39%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

Increase +19.82 pp

From 78.57% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

exploit-databaseremotemultipleVerified
Intelligent Platform Management Interface - Information Disclosure
Maturity: weaponized
MetasploitremoteUnverified
IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval
auxiliary/scanner/ipmi/ipmi_dumphashes
Maturity: poc