Thousands of Servers Can Be Backdoored by Exploiting Buggy Motherboard Controllers

Buggy microcontrollers making up some of the world's most important servers can be easily backdoored

runZero disclosed 12+ new flaws in BMCs from HPE, Supermicro, Dell, Lenovo, Huawei, and others at Black HatScans found 86k internet‑exposed BMCs and 120k internal devicesResearchers warn BMCs form a widespread, under‑patched parallel attack surfaceSecurity researchers have discovered more than a dozen new vulnerabilities in Baseboard management controllers (BMC), hardware components found in thousands of the world’s most popular enterprise serve…

Thousands of servers can be backdoored by exploiting buggy motherboard controllers

Thousands of Internet-connected servers sold by the world’s biggest manufacturers can be remotely backdoored by exploiting critical vulnerabilities—some more than a decade old—that lurk deep inside system motherboards, according to research presented Wednesday. Baseboard management controllers are miniature computers that are embedded into the motherboards of virtually every enterprise server. The microcontrollers, typically abbreviated as BMCs,…

A 20-year-old flaw just exposed thousands of data centers

A large-scale Internet scan has uncovered thousands of exposed server management interfaces vulnerable to a 2013 authentication flaw, raising fresh concerns about the resilience of the hardware management layer powering today's AI and GPU environments The post A 20-year-old flaw just exposed thousands of data centers appeared first on Express Computer.

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks

Over 24,000 internet-accessible server-management interfaces disclose authentication hashes before login. The post Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks appeared first on SecurityWeek.