2 ms·

Definitely, if you can update the bios from your operating system then you could load something malicious. Also, I wonder if you could read the current IPMI pas

• mjg59 10y ago
  If you're able to get access to the management network then you've basically already won - IPMI implementations just aren't good enough in general to resist any kind of determined attack. But to answer your question, conforming implementations shouldn't let you read the password back over the local interface. Whether that's true in reality, well…
  • buildbot 10y ago
    Hmm so with ipmitool you can test passwords for every registered IPMI user - so that's scriptable. (How fast can you test? who knows) Then, you can get the IPMI network VLAN from ipmitool as well, if your hosting provider was lazy and didn't use the dedicated port. After that, configure your box to be on that VLAN and then you're in???
    • hueving 10y ago
      Is it possible to access ipmi interface via the normal nic? If so, I would hope they ensure access to that vlan is removed from the switch port as part of the handover process to the tenant.
      • buildbot 10y ago
        Testing this theory yes, you can, and yes, my provider at least does.