by Kastro
Paper/Archive/CVE-2024-3411

CVE-2024-3411

Dell iDRAC8 — Insufficient Randomness When Validating an IPMI Authenticated Session

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 53.9.539 × 2010.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets to manage BMC device.

Affected

ProductAffectedFixed inSource
iDRAC82.86.86.86–CNA
IPMI2.0, revision 1.1E7–CNA
*IPMI 2.0, revision 1.1E7–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refkb.cert.org/vuls/id/163057refintel.la/content/dam/www/public/us/en/documents/specification-updates/ipmi-intelligent-platform-mgt-interface-spec-2nd-gen-v2-0-spec-update.pdfrefdell.com/support/kbdoc/en-US/000226504/dsa-2024-295-security-update-for-dell-idrac8-ipmi-session-vulnerabilityrefkb.cert.org/vuls/id/163057