3 ms·
Firmware vulnerabilities in millions of computers give hackers superuser status
- archo 3y agoThe vulnerabilities are: https://nvd.nist.gov/vuln/detail/CVE-2023-34329 https://nvd.nist.gov/vuln/detail/CVE-2023-34329 - CVE-2023-34329, an authentication bypass via HTTP headers that has a severity rating of 9.9 out of 10. https://nvd.nist.gov/vuln/detail/CVE-2023-34330 https://nvd.nist.gov/vuln/detail/CVE-2023-34330 - CVE-2023-34330, Code injection via Dynamic Redfish Extension. - Its severity rating is 8.2.
- someplaceguy 3y agoA BMC with vulnerabilities, what a surprise! But more seriously: > 2) Put in place automation processes for pushing patches/upgrades through the server operating system itself. > Organizations that rely on AMI-powered BMCs to manage their servers should install the updates as soon as possible. Sure, this is much better than doing nothing, but if you're serious about security you should really take the other advice, which is to put them in another network, hopefully one that is not connected to the Internet (but still, update the firmware). If your BMC contains anything remotely close to the complexity of a Linux kernel and you're not updating it weekly as bugs are fixed, expect to be vulnerable (like any other system).
- tinus_hn 3y agoYou mean like Intel Management Engine (IME), in every modern Intel processor, practically impossible to disable?
- someplaceguy 3y agoIndeed... and you can add the AMD PSP (in every modern AMD CPU), almost all SBC models (with the RPi and a select few others being notable exceptions) and almost every smartphone in the world...