CVE-2014-8272 in Dell iDRAC6 modular
Resumen (Inglés)
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.
Reservar
2014-10-12
Divulgación
2014-12-19
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 73305 | Dell iDRAC6 modular Session escalada de privilegios | 269 | Prueba de concepto | Arreglo oficial | CVE-2014-8272 |