Stack-Based Buffer Overflow in Supermicro X9 Motherboards' IPMI Web Interface

CVE-2013-3623

What is CVE-2013-3623?

Multiple stack-based buffer overflows exist in the web interface of the Intelligent Platform Management Interface (IPMI) for Supermicro X9 generation motherboards. Specifically, vulnerabilities are triggered via the sess_sid or ACT parameters, allowing remote attackers to execute arbitrary code. This flaw affects firmware versions prior to 3.15, posing significant security risks if exploited.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2013-3623
Created by Rapid7

References