CVE-2013-4786

CVE-2013-4786 is a high-severity vulnerability affecting IPMI 2.0 implementations, including products from Intel and Oracle, that allows remote attackers to obtain password hashes. This is achieved by exploiting the RAKP authentication mechanism to extract HMACs from BMC responses, enabling offline password guessing. With a CVSS score of 7.5 and an EPSS percentile of 0.74347, the vulnerability is easily exploitable over the network with low attack complexity, leading to a high impact on confidentiality. While not on the KEV catalog, exploit modules exist in Metasploit and ExploitDB, and there is community discussion around exploitation tools, indicating its potential for exploitation.