Baseboard management controllers from major manufacturers contain critical vulnerabilities that allow attackers to backdoor servers. The flaws affect infrastructure across enterprises and data centers worldwide.
Baseboard management controllers (BMCs)—the firmware systems that manage server hardware remotely—contain security vulnerabilities that can be exploited to gain unauthorized access to thousands of machines.
BMCs are responsible for functions like remote power management, temperature monitoring, and system diagnostics. They operate independently from a server's main operating system, making them valuable targets for attackers seeking persistent access.
Security researchers discovered that BMCs from the world's largest manufacturers contain buggy code that fails to properly validate requests or implement adequate access controls. These flaws create multiple pathways for exploitation, potentially allowing attackers to:
- Gain remote access without authentication
- Install persistent backdoors
- Bypass security software running on the host system
- Maintain access even if the operating system is compromised or replaced
The vulnerability is particularly concerning because BMC access typically requires privileged credentials—yet the flawed implementations fail to properly enforce this requirement in several cases.
Affected manufacturers have not yet publicly acknowledged the scope of the issue or released comprehensive patches. Enterprise customers relying on these controllers have limited immediate remediation options.
The discovery highlights a broader problem in server infrastructure security. BMCs are frequently overlooked in security audits despite their critical role in system management. They often run outdated firmware and lack the security scrutiny applied to main operating systems.
Organizations using affected hardware are advised to:
- Audit BMC access logs for suspicious activity
- Restrict network access to BMC ports
- Isolate BMC traffic on separate network segments
- Contact manufacturers for firmware updates
- Consider hardware replacement timelines
This incident underscores the security risks inherent in complex hardware supply chains and the challenges of securing deeply embedded firmware across diverse server environments.
Security researchers have identified potential hardware backdoors in certain x86 processors. The findings, detailed in a GitHub repository called Rosenbridge, reveal vulnerabilities at the processor level that could allow unauthorized access.
Flock Safety, the traffic camera company, is expanding beyond law enforcement with plans to deploy dashcams in rideshare vehicles and offer coaching services to police departments.
A sharp rise in explicit deepfake images of UK children has been reported by an online safety service, as authorities warn that AI tools are making the creation of sexualized or 'nudified' content increasingly accessible.
Gen's latest threat report details two distinct attack campaigns exploiting compromised email accounts and clipboard manipulation to steal from businesses and cryptocurrency users.