CVE-2014-8272

Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2014-8272 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit and 1 repository PoC.

Description

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1

Proofs of concept

2

Catalogued exploits

ExploitDBDell iDRAC IPMI 1.5 - Insufficient Session ID RandomnessExploitDB exploitby Yong Chuan_ KohNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitLabyongchuank/cve-2014-8272-dell-idrac-ipmi-weak-sessionidRepository PoCby yongchuank0Not analyzed4 files

970.1 KiB

GitLab
PoC details

References

4