CVE-2014-8272 | BDVDB-2026-66884 Detail

Description#

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/BLUU-9RDQHM
http://www.exploit-db.com/exploits/35770
http://www.kb.cert.org/vuls/id/843044

Exploit#

http://www.exploit-db.com/exploits/35770

History#

Version 12014-12-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.