5 ms·
Yeah, so true. Just had to retire a server a couple weeks ago, because of a new vulnerability discovered in its IPMI firmware. It's a bummer, because if your
by spotman 11y ago
Yeah, so true.
Just had to retire a server a couple weeks ago, because of a new vulnerability discovered in its IPMI firmware.
It's a bummer, because if your support contract runs out, sometimes you have to pay to upgrade, which leaves you in a bind. In my case it made more sense to just replace this one server.
But, ultimately I guess my point is that even if IPMI is patchable, there is another hurdle, you can't as easily maintain it yourself as you can a linux host.
- jlgaddis 11y agoI have a few old servers that don't get IPMI firmware updates anymore. Fortunately, the IPMI interfaces are on their own small, isolated VLAN that's behind a proper hardware firewall and only accessible from a handful of management hosts.