CVE-2014-8272 in Dell iDRAC6 modular
摘要 (英语)
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.
预定
2014-10-12
披露
2014-12-19
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 73305 | Dell iDRAC6 modular Session 权限提升 | 269 | 概念验证 | 官方修复 | CVE-2014-8272 |