module

Supermicro Onboard IPMI Port 49152 Sensitive File Exposure

Try Surface Command
Back to search
Disclosed
Jun 19, 2014
Created
May 30, 2018

Description

This module abuses a file exposure vulnerability accessible through the web interface
on port 49152 of Supermicro Onboard IPMI controllers. The vulnerability allows an attacker
to obtain detailed device information and download data files containing the clear-text
usernames and passwords for the controller. In May of 2014, at least 30,000 unique IPs
were exposed to the internet with this vulnerability.

Authors

Zach Wikholm kestrel@trylinux.us
John Matherly jmath@shodan.io
Dan Farmer zen@fish2.com
hdm x@hdm.io

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use auxiliary/scanner/http/smt_ipmi_49152_exposure
    msf auxiliary(smt_ipmi_49152_exposure) > show actions
        ...actions...
    msf auxiliary(smt_ipmi_49152_exposure) > set ACTION < action-name >
    msf auxiliary(smt_ipmi_49152_exposure) > show options
        ...show and set options...
    msf auxiliary(smt_ipmi_49152_exposure) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today