CVE:CVE-2013-3620
CNNVD:CNNVD-202001-020
SuperMicro X9和SuperMicro X8都是美国SuperMicro公司的一款服务器主板。
使用3.15之前版本固件的Supermicro SMT X9和使用3.12之前版本固件的Supermicro SMT X8中的Intelligent Platform Management Interface (IPMI)存在安全漏洞，该漏洞源于程序使用了硬编码的WSMan凭证。攻击者可利用该漏洞获取用户凭据及OpenWSMan界面的未授权访问。
solution:Upgrade supermicro smt_x9_firmware to a higher version than 3.15,and avoid the version (,3.15); Upgrade supermicro smt_x8_firmware to a higher version than 3.12,and avoid the version (,3.12); Upgrade citrix netscaler_sdx_firmware to a higher version than 10,and avoid the version 10; Upgrade citrix netscaler_firmware to a higher version than -; Upgrade citrix netscaler_sd-wan_firmware to a higher version than -