Default Password Vulnerability in IBM's Intelligent Platform Management Interface
CVE-2013-4031
Currently unrated
Key Information:
- Vendor
IBM
- Vendor
- CVE Published:
- 9 August 2013
What is CVE-2013-4031?
The Intelligent Platform Management Interface (IPMI) implementations on various IBM hardware, such as BladeCenter and Flex System, are compromised by having a default password for the IPMI user account. This configuration enables potential remote attackers to carry out critical actions such as powering on, powering off, or rebooting the server. Additionally, the vulnerability allows unauthorized users to add or modify accounts, exposing the system to further risks. Organizations using affected IBM servers should ensure that they change the default IPMI credentials to mitigate this security threat.