Intel Ipmi vulnerabilities

2 vulnerabilities

Known vulnerabilities in Intel Ipmi, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2014-8272dellidrac6_modular+3
EPSS score
19.15%
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.9.1CVE-2024-3411dellidrac8_firmware+1
EPSS score
0.72%
Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets to manage BMC device.