Vulnerability in Dell Idrac8
CVE-2024-3411
Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using…
EPSS: 0.007 (49.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Dell Idrac8 — versions 2.86.86.86
- Intel Ipmi — versions 2.0, revision 1.1E7
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-3411?
- CVE-2024-3411 is a critical-severity vulnerability in Dell Idrac8, classified under Insufficient Entropy. CVSS score: 9.1/10. Published 2024-04-30.
- How severe is CVE-2024-3411?
- Critical severity. CVSS v3 base score is 9.1 out of 10.