#bmc
-
Thousands of servers are vulnerable through their motherboard management controllers
At the Black Hat conference, researcher HD Moore showed that the BMC controllers built into server boards remain an “under-monitored” parallel attack surface. More than half of the devices found online contain critical vulnerabilities.
-
24,000 Server BMCs Leak Password Hashes via a 20-Year-Old IPMI Flaw
More than 24,000 internet-facing servers are exposing material for cracking their passwords because of an old weakness in the IPMI 2.0 protocol. For a third of them, researchers were able to recover working credentials.