← Back

CVE-2014-8272

nvd nist
Published: Dec 19, 2014Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

Affected (4)

Dell
3 products
Idrac6 Modular
Idrac7
Idrac6 Monolithic
Intel
1 product
Ipmi
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Idrac6 Modular
Up to 3.60
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Idrac7
Up to 1.56.55
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Ipmi
Version 1.5
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Idrac6 Monolithic
Up to 1.97

References (6)

Source: cret@cert.org
Exploit
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.