CVE-2013-6785

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-23 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter.

Affected products

Supermicro Intelligent Platform Management Interface: before smt_x9_315 — fixed in smt_x9_315

How to fix

Upgrade to a fixed version: Supermicro Intelligent Platform Management Interface smt_x9_315. Check the vendor advisory for mitigations.

References

https://blog.rapid7.com/2013/11/06/supermicro-ipmi-firmware-vulnerabilities/
https://www.tenable.com/cve/CVE-2013-6785
https://blog.rapid7.com/2013/11/06/supermicro-ipmi-firmware-vulnerabilities/

Get alerted when CVE-2013-6785 or the next vulnerability affects your stack