Intel Ipmi vulnerabilities

2 CVEs affecting Intel Ipmi, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-3411, published 2024-04-30.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-8272, published 2014-12-19. Medium severity, CVSS 5.0. EPSS: 19.2% chance of exploitation in the next 30 days. The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote…
• CVE-2024-3411, published 2024-04-30. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random…