CVE-2013-3622: Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before...

Security readout for executives and security teams

This CVE affects Supermicro X9-generation motherboard IPMI firmware before 3.15. An authenticated remote user can abuse the logout.cgi SID parameter to trigger a buffer overflow and potentially run code on the management controller. Business impact is highest where IPMI is reachable beyond tightly controlled administrator networks. Organizations with Supermicro X9-generation systems using IPMI firmware earlier than 3.15 are the likely exposure group. Risk rises sharply if IPMI is internet-accessible, reachable from broad internal networks, or uses shared administrator credentials. Prioritize remediation for exposed or broadly reachable IPMI services. This is not a general workstation issue; it is a management-plane risk that can affect server control, recovery, and operational continuity. Mitigation focus: Inventory Supermicro X9 systems with IPMI enabled.; Check BMC/IPMI firmware and prioritize upgrades to 3.15 or later vendor guidance.; Restrict IPMI access to dedicated management networks or VPNs..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.