VDB

GCVE-110-CERTCC-2014-843044

GCVE-110-CERTCC-2014-843044
Advisory PublishedCVSS 10.0/10
Vulnetix · Advisory published December 18, 2014
The Intelligent Platform Management Interface (IPMI) v1.5 implementations in multiple Dell iDRAC releases are vulnerable to arbitrary command injection due to use of insufficiently random session ID values.
Download JSON Open in Console

Risk Scores

CVSS 2.0
10.0/10
Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact4d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7.8remediation_levelOFreport_confidenceCenvironmental_score6.358486917024target_distributionMenvironmental_vectorCDP:LM/TD:M/CR:H/IR:H/AR:H

Aliases

CVE-2014-8272

References

Multiple Dell iDRAC IPMI v1.5 implementations use insufficiently random session ID values
url
Multiple Dell iDRAC IPMI v1.5 implementations use insufficiently random session ID values
url
Multiple Dell iDRAC IPMI v1.5 implementations use insufficiently random session ID values
url
Multiple Dell iDRAC IPMI v1.5 implementations use insufficiently random session ID values
url
Multiple Dell iDRAC IPMI v1.5 implementations use insufficiently random session ID values
advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›