CVE-2014-8272

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

19.00% chance of exploitation in the next 30 days, 97th percentile

Published

2014-12-19

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/35770

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/35770

References

• CVE Record
• NVD entry

Related

• CVE-2014-8270
• CVE-2014-8275
• CVE-2014-8147
• CVE-2014-8295
• CVE-2014-8146
• CVE-2014-8305