Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2014-8272
Deferred
More InfoOfficial Page
Source-cret@cert.org
View Known Exploited Vulnerability (KEV) details
Published At-19 Dec, 2014 | 11:59
Updated At-12 Apr, 2025 | 10:46

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 5.0
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
CPE Matches
Dell Inc.
dell
>>idrac6_modular>>Versions up to 3.60(inclusive)
cpe:2.3:a:dell:idrac6_modular:*:*:*:*:*:*:*:*
Dell Inc.
dell
>>idrac7>>Versions up to 1.56.55(inclusive)
cpe:2.3:a:dell:idrac7:*:*:*:*:*:*:*:*
Intel Corporation
intel
>>ipmi>>1.5
cpe:2.3:a:intel:ipmi:1.5:*:*:*:*:*:*:*
Dell Inc.
dell
>>idrac6_monolithic>>Versions up to 1.97(inclusive)
cpe:2.3:a:dell:idrac6_monolithic:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
Evaluator Description
CWE-330: Use of Insufficiently Random Values
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://www.exploit-db.com/exploits/35770cret@cert.org
Exploit
http://www.kb.cert.org/vuls/id/843044cret@cert.org
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-9RDQHMcret@cert.org
Third Party Advisory
US Government Resource
http://www.exploit-db.com/exploits/35770af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.kb.cert.org/vuls/id/843044af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-9RDQHMaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
US Government Resource
Hyperlink: http://www.exploit-db.com/exploits/35770
Source: cret@cert.org
Resource:
Exploit
Hyperlink: http://www.kb.cert.org/vuls/id/843044
Source: cret@cert.org
Resource:
Third Party Advisory
US Government Resource
Hyperlink: http://www.kb.cert.org/vuls/id/BLUU-9RDQHM
Source: cret@cert.org
Resource:
Third Party Advisory
US Government Resource
Hyperlink: http://www.exploit-db.com/exploits/35770
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: http://www.kb.cert.org/vuls/id/843044
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
US Government Resource
Hyperlink: http://www.kb.cert.org/vuls/id/BLUU-9RDQHM
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
US Government Resource
Change History
0Changes found
Details not found