Lucene search
HistoryDec 19, 2014 - 11:59 a.m.
CVE-2014-8272
ipmi
dell
idrac6
idrac7
vulnerability
session id
remote attackers
arbitrary commands
brute-force attack
cve-2014-8272
7.5 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.022 Low
EPSS
Percentile
89.5%
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.
Affected configurations
Node
dellidrac6_modularRangeβ€3.60
Node
dellidrac7Rangeβ€1.56.55
Node
intelipmiMatch1.5
Node
dellidrac6_monolithicRangeβ€1.97
| CPE | Name | Operator | Version |
|---|---|---|---|
| dell:idrac6_modular | dell idrac6 modular | le | 3.60 |
Related
seebug
seebug
Supermicro Onboard IPMI Port 49152 ζζζδ»Άζ³ι²ζΌζ΄
2014-09-12 00:00:00
exploitpack
exploitpack
Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness
2015-01-13 00:00:00
Dell-iDRAC-IPMI-1.5
2015-01-14 18:30:42
cert
cert
nessus
nessus
Dell iDRAC Improper Session ID Handling (CVE-2014-8272)
2024-01-17 00:00:00
Dell iDRAC Products IPMI Arbitrary Command Injection Vulnerability
2015-01-09 00:00:00
nvd
nvd
CVE-2014-8272
2014-12-19 11:59:05
packetstorm
packetstorm
Dell iDRAC IPMI 1.5 Insufficient Session ID Randomness
2015-01-14 00:00:00
cvelist
cvelist
CVE-2014-8272
2014-12-19 11:00:00
prion
prion
Command injection
2014-12-19 11:59:00
openvas
openvas
Dell iDRAC Weak SessionID Vulnerability (IPMI Protocol) - Active Check
2015-01-21 00:00:00
exploitdb
exploitdb
Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness
2015-01-13 00:00:00
7.5 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.022 Low
EPSS
Percentile
89.5%
Related for CVE-2014-8272