CVE-2013-4783

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-07-08 · updated 2026-06-16
Weakness: CWE-287

Description

The Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with firmware before 1.23.23, allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password. NOTE: the vendor disputes the significance of this issue, stating "DRAC's are intended to be on a separate management network; they are not designed nor intended to be placed on or connected to the Internet."

Affected products

Dell Idrac6 Bmc: all versions

References

http://en.community.dell.com/techcenter/systems-management/w/wiki/4929.how-to-check-if-ipmi-cipher-0-is-off.aspx
http://fish2.com/ipmi/cipherzero.html
http://osvdb.org/show/osvdb/93039
http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero
http://www.wired.com/threatlevel/2013/07/ipmi/
https://lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.html
http://en.community.dell.com/techcenter/systems-management/w/wiki/4929.how-to-check-if-ipmi-cipher-0-is-off.aspx
http://fish2.com/ipmi/cipherzero.html
http://osvdb.org/show/osvdb/93039
http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero

Get alerted when CVE-2013-4783 or the next vulnerability affects your stack