VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 19, 2014· Updated Jun 17, 2026

CVE-2014-8272

CVE-2014-8272

Description

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Dell/Idrac6 Modular2 versions
    cpe:2.3:a:dell:idrac6_modular:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dell:idrac6_modular:*:*:*:*:*:*:*:*range: <=3.60
    • (no CPE)range: <3.65
  • Dell/Idrac6 Monolithic2 versions
    cpe:2.3:a:dell:idrac6_monolithic:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dell:idrac6_monolithic:*:*:*:*:*:*:*:*range: <=1.97
    • (no CPE)range: <1.98
  • Dell/Idrac72 versions
    cpe:2.3:a:dell:idrac7:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dell:idrac7:*:*:*:*:*:*:*:*range: <=1.56.55
    • (no CPE)range: <1.57.57
  • Intel/Ipmi
    cpe:2.3:a:intel:ipmi:1.5:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.