Check Point Advisories

Supermicro Onboard IPMI Static SSL Certificate Scanner Information Disclosure (CVE-2013-3619)

Check Point Reference:	CPAI-2013-3546
Date Published:	12 Nov 2013
Severity:	High
Last Updated:	Tuesday 01 January, 2013
Source:	CVE-2013-3619
Protection Provided by:
Who is Vulnerable?	IPMI in Supermicro servers
Vulnerability Description	An SSL keys handling flaw has been reported in Supermicro IPMI firmware.
Vulnerability Details	A remote attacker could leverage this flaw to intercept SSL traffic to the firmware, using a certain SSL key. Successful exploitation would allow an attacker to view undisclosed information.