What’s Vulnerable › Vulnerabilities

CVE-2014-8272

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-12-19 · updated 2026-06-17

Description

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

Affected products

• Dell EMC iDRAC6 (Modular): through 3.60
• Dell EMC iDRAC6 (Monolithic): through 1.97
• Dell EMC iDRAC7: through 1.56.55
• Intel IPMI: 1.5

References

• http://www.exploit-db.com/exploits/35770
• http://www.kb.cert.org/vuls/id/843044
• http://www.kb.cert.org/vuls/id/BLUU-9RDQHM
• http://www.exploit-db.com/exploits/35770
• http://www.kb.cert.org/vuls/id/843044
• http://www.kb.cert.org/vuls/id/BLUU-9RDQHM

Get alerted when CVE-2014-8272 or the next vulnerability affects your stack