CVE-2014-8272: The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 be...

Security readout for executives and security teams

This CVE affects Dell server remote-management controllers using IPMI 1.5. Weak session ID selection can make brute-force attacks easier, potentially allowing remote command execution against management interfaces. The source bundle does not show confirmed active exploitation. Exposure is most likely where Dell iDRAC6 or iDRAC7 management interfaces are reachable by untrusted networks and IPMI 1.5 is enabled. Internet-facing or broadly routed management networks raise urgency. Treat this as high priority for infrastructure teams because iDRAC controls server management outside the operating system. Prioritize internet-facing or shared-network management interfaces first. Mitigation focus: Identify Dell iDRAC6 and iDRAC7 assets and firmware versions.; Upgrade iDRAC6 modular to 3.65 or later where applicable.; Upgrade iDRAC6 monolithic to 1.98 or later where applicable..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.