Lucene search
PRIOn knowledge basePRION:CVE-2014-8272HistoryDec 19, 2014 - 11:59 a.m.
Command injection
2014-12-1911:59:00
PRIOn knowledge base
www.prio-n.com
7
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| idrac6_modular | le | 3.60 | |
| idrac6_monolithic | le | 1.97 | |
| idrac7 | le | 1.56.55 | |
| ipmi | eq | 1.5 |
Related
nessus
nessus
Dell iDRAC Improper Session ID Handling (CVE-2014-8272)
2024-01-17 00:00:00
Dell iDRAC Products IPMI Arbitrary Command Injection Vulnerability
2015-01-09 00:00:00
nvd
nvd
CVE-2014-8272
2014-12-19 11:59:05
exploitpack
exploitpack
Dell-iDRAC-IPMI-1.5
2015-01-14 18:30:42
Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness
2015-01-13 00:00:00
packetstorm
packetstorm
Dell iDRAC IPMI 1.5 Insufficient Session ID Randomness
2015-01-14 00:00:00
cvelist
cvelist
CVE-2014-8272
2014-12-19 11:00:00
cve
cve
CVE-2014-8272
2014-12-19 11:59:05
seebug
seebug
Supermicro Onboard IPMI Port 49152 敏感文件泄露漏洞
2014-09-12 00:00:00
cert
cert
openvas
openvas
Dell iDRAC Weak SessionID Vulnerability (IPMI Protocol) - Active Check
2015-01-21 00:00:00
exploitdb
exploitdb
Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness
2015-01-13 00:00:00