CVE-2014-8272 The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote att...
MediumCVSS 5.0
EPSS 19.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell idrac6 modular | <= 3.60 | No fix listed |
| Dell idrac7 | <= 1.56.55 | No fix listed |
| intel ipmi | = 1.5 | No fix listed |
| Dell idrac6 monolithic | <= 1.97 | No fix listed |
References
- 35770 exploit
- VU#843044 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource