4 ms·
I'm mostly interested in if servers with ipmi (supermicro in particular) are vulnerable, and to what degree. If it's the network with the ipmi ports, that's one
by wiredfool 9y ago
I'm mostly interested in if servers with ipmi (supermicro in particular) are vulnerable, and to what degree. If it's the network with the ipmi ports, that's one thing, but if it's public facing...
Much stuff is going to be hitting fans.
- amluto 9y agoIIUC the SuperMicro BMC is different software on a separate third-party chip. So it's reasonably likely to be vulnerable, but not to this particular vulnerability.
- ams6110 9y agoYour IPMI should be on a private management network, at least. If you haven't done that, I hope you at least changed the default password.
- wiredfool 9y agoYeah, that's pretty easy on this generation. But there was a previous generation where the IPMI piggybacked on one of the main NICs, where it was a lot easier to accidentally expose that to unfriendly traffic.