CVE-2013-4786High· 7.5▾ MidnightPoC available

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP …

▾ Midnight zone — Critical, or high with PoC / in-the-wild

Depth score73/ 100 · Elevated

impact 41.3 · likelihood 19.7 · exploitation 12

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Jul 8, 2013

Updated

Oct 9, 2026

CVSS

7.5

Vendor

intel

Product

intelligent_platform_management_interface

CWE

CWE-255

Depth score

73 · Elevated

EPSS

98% · p100

Platforms

—

Source

NVD

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploit availability

Public exploit / PoC code seen in 3 sources. Availability, not in-the-wild use.

checked 2026-10-26

Exploit-DB

Search Exploit-DB for CVE-2013-4786 ↗

GitHub PoCs

1 public repository

fin3ss3g0d/CosmicRakp ↗

Metasploit

auxiliary/scanner/ipmi/ipmi_dumphashes ↗

CISA SSVC

decided 2026-10-09

Exploitation: none
Automatable: yes
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Oct 9.

79% → 98%▲ 20%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

5 events · 4859 days

Jul 8, 2013Published
Disclosed via NVD
Oct 9, 2026Record revised
Last analysed / modified upstream
Oct 9, 2026EPSS first tracked
79%
Oct 26, 2026EPSS peak
79% → 98%
Oct 26, 2026Public exploit observed
Exploit-DB · 1 GitHub repo · Metasploit ×1 (last check)

intel CWE-255 #nvd #exploit-available #cve.org

Affected

fujitsu_m10_firmware <= 2290
intelligent_platform_management_interface = 2.0

Full technical detail▾

Overview

Affected

fujitsu_m10_firmware <= 2290
intelligent_platform_management_interface = 2.0

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Change history

Field changes observed since this record was first indexed.

Oct 26, 2026EPSS 79% → 98%

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#exploit-available#cve.org