#серверы
-
UEFI firmware flaw enables code execution early in the boot process on servers
A critical vulnerability in EDK2 lets attackers run code while a system is still booting. According to Ars Technica, most servers in the world are at risk.
-
Thousands of servers are vulnerable through their motherboard management controllers
At the Black Hat conference, researcher HD Moore showed that the BMC controllers built into server boards remain an “under-monitored” parallel attack surface. More than half of the devices found online contain critical vulnerabilities.
-
24,000 Server BMCs Leak Password Hashes via a 20-Year-Old IPMI Flaw
More than 24,000 internet-facing servers are exposing material for cracking their passwords because of an old weakness in the IPMI 2.0 protocol. For a third of them, researchers were able to recover working credentials.