VULNERABILITY INTELLIGENCE
CVE-2014-8272
CVSS score5 MEDIUM
EPSS probability19.15%
CISA KEVNot currently listed
Published2014-12-19
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.
Primary references
- cret@cert.org — Exploit
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource