Critical AMI MegaRAC bug can let attackers hijack, brick servers

Critical AMI MegaRAC bug can let attackers hijack, brick servers

​A new critical severity vulnerability found in American Megatrends International's MegaRAC Baseboard Management Controller (BMC) software can let attackers hijack and potentially brick vulnerable servers.

A critical vulnerability in the BMC firmware runs numerous servers. Hackers can infiltrate malware and even damage hardware. (Sicherheitlcke, Lenovo)

Newly discovered critical AMI BMC vulnerability allows remote servers to be taken over and bricked

Remotely Exploitable AMI MegaRAC Vulnerabilities - BMC&C Part 3 - Eclypsium | Supply Chain Security for the Modern Enterprise

The Eclypsium research team has discovered a previously unknown remotely exploitable vulnerability in AMI’s MegaRAC software that allows attackers to bypass authentication remotely.