Is CVE-2014-8272 being actively exploited?

CVE-2014-8272 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-8272?

CVE-2014-8272 has a CVSS 2.0 base score of 5.0 (MEDIUM).

CVE-2014-8272

MEDIUM · CVSS 5.0EPSS 19.2%EU EUVD

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

Key facts

CVSS score: 5.0 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS score: 19.2% (97th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-8113)
Published: December 19, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-8113 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

dell / idrac6 modular
dell / idrac6 monolithic
dell / idrac7
intel / ipmi

References

http://www.exploit-db.com/exploits/35770(Exploit)
http://www.kb.cert.org/vuls/id/843044(Third Party Advisory, US Government Resource)
http://www.kb.cert.org/vuls/id/BLUU-9RDQHM(Third Party Advisory, US Government Resource)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain