CVE-2013-3623: Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platf...

Security readout for executives and security teams

This CVE affects Supermicro X9 generation motherboard IPMI firmware before 3.15. A remote attacker reaching the IPMI web interface could trigger stack buffer overflows and potentially run code on the management controller. Because IPMI often has high operational privilege, exposed interfaces should be treated as urgent infrastructure risk. Exposure is limited to environments with Supermicro X9 generation IPMI firmware before 3.15, especially where the IPMI web interface is reachable from user networks, management VPNs, or the internet. Prioritize remediation where vulnerable IPMI is reachable beyond a tightly controlled management network. Compromise of a management controller can affect server availability, recovery, and administrative control. Mitigation focus: Inventory Supermicro X9 systems and record IPMI firmware versions.; Upgrade affected IPMI firmware to 3.15 or later per vendor guidance.; Restrict IPMI access to a dedicated management network or VPN..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.