CVE-2013-4786
High · 7.5CVSS
7.5
EPSS
78.6%
Published
Jul 8, 2013
CISA due date
—
The record
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19750 A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. CWE-255
- CVE-2026-11552 A vulnerability has been found in SourceCodester Onlne Examination & Learning Management… CWE-255
- CVE-2026-11515 A vulnerability has been found in SourceCodester Barangay Resident Profiling and… CWE-255
- CVE-2026-6597 A weakness has been identified in langflow-ai langflow up to 1.8.3. CWE-255
- CVE-2026-4251 A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. CWE-255
- CVE-2026-4250 A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to… CWE-255
- CVE-2026-4242 A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0… CWE-255
- CVE-2026-4243 A weakness has been identified in La Nacion App 10.2.25 on Android. CWE-255