CVE-2014-8272

no score yetEPSS 19%

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2014-12-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:idrac6_modular
dell:idrac6_monolithic
dell:idrac7
intel:ipmi

References

http://www.exploit-db.com/exploits/35770
http://www.kb.cert.org/vuls/id/843044
http://www.kb.cert.org/vuls/id/BLUU-9RDQHM
http://www.exploit-db.com/exploits/35770
http://www.kb.cert.org/vuls/id/843044

Check your stack JSON