Sploitus

CVE-2014-8272

5 known exploits for CVE-2014-8272

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

Affected products
Idrac6, Idrac7
Dell idrac6 Modular
≤ 3.60
Fix
Available
CVSS 2.0
5.0 MEDIUM
EPSS
19.0% (97th percentile)
NVD status
Modified
Published
2014-12-19
CVE-2014-8272 at NVD
Authoritative description, scoring and affected products

5 known exploits for CVE-2014-8272

Proof-of-concept code and exploit modules indexed by Sploitus

Dell-iDRAC-IPMI-1.5
2015-01-14 YongEXPLOITPACKPython
Dell iDRAC IPMI 1.5 Insufficient Session ID Randomness
2015-01-14 Yong Chuan KohPACKETSTORMPython
Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness
2015-01-13 Yong Chuan_ KohEXPLOITPACKPython
Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness
2015-01-13 Yong Chuan_ KohEXPLOITDBPython
Supermicro Onboard IPMI Port 49152 敏感文件泄露漏洞
2014-09-12 RootSEEBUGPython