CVE-2014-8272

CVE-2014-8272 affects Dell iDRAC6 (modular before 3.65; monolithic before 1.98) and iDRAC7 before 1.57.57, where IPMI 1.5 session ID values are not properly randomized or selected, enabling remote attackers to brute-force session IDs and execute arbitrary commands. The vulnerability is remote (ne...

CVE-2013-3589

Dell iDRAC6 (monolithic) and iDRAC7 devices are affected by a cross-site scripting (XSS) vulnerability in the Administrative Web Interface login page, exploitable via the ErrorMsg parameter. Affected versions are iDRAC6 firmware before 1.96 and iDRAC7 firmware before 1.46.45. The issue allows rem...