CVE-2013-6718

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-01 · updated 2026-06-17
Weakness: CWE-310

Description

The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account names and passwords via use of an unspecified interface.

Affected products

IBM Advanced Management Module Firmware: 3.64-bbet64b, 3.64-bbet64c, 3.64-bbet64g, 3.64-bpeo64b, 3.64-bpeo64c, 3.64-bpeo64g (+3)

References

http://osvdb.org/100397
http://secunia.com/advisories/55921
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_bladecenter_advanced_management_module_account_information_exposure_cve_2013_6718
http://www.securityfocus.com/bid/64032
https://exchange.xforce.ibmcloud.com/vulnerabilities/89174
http://osvdb.org/100397
http://secunia.com/advisories/55921
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_bladecenter_advanced_management_module_account_information_exposure_cve_2013_6718
http://www.securityfocus.com/bid/64032
https://exchange.xforce.ibmcloud.com/vulnerabilities/89174

Get alerted when CVE-2013-6718 or the next vulnerability affects your stack