The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.

Project Subscriptions

Vendors Products
Bladecenter Subscribe
Flex System X220 Compute Node Subscribe
Flex System X240 Compute Node Subscribe
Flex System X440 Compute Node Subscribe
System X3100 M4 Subscribe
System X3200 M3 Subscribe
System X3250 M3 Subscribe
System X3250 M4 Subscribe
System X3400 M2 Subscribe
System X3400 M3 Subscribe
System X3500 M2 Subscribe
System X3500 M3 Subscribe
System X3500 M4 Subscribe
System X3530 M4 Subscribe
System X3550 M2 Subscribe
System X3550 M3 Subscribe
System X3550 M4 Subscribe
System X3620 M3 Subscribe
System X3630 M3 Subscribe
System X3630 M4 Subscribe
System X3650 M2 Subscribe
System X3650 M3 Subscribe
System X3650 M4 Subscribe
System X3690 X5 Subscribe
System X3750 M4 Subscribe
System X3850 X5 Subscribe
System X3950 X5 Subscribe
System X Idataplex Dx360 M2 Server Subscribe
System X Idataplex Dx360 M3 Server Subscribe
System X Idataplex Dx360 M4 Server Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2013-3962 The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2024-08-06T16:30:49.467Z

Reserved: 2013-06-07T00:00:00

Link: CVE-2013-4031

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-08-09T23:55:02.840

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-4031

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses