{"id":1188946,"date":"2023-10-04T18:21:10","date_gmt":"2023-10-04T22:21:10","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1188946"},"modified":"2023-10-04T18:21:10","modified_gmt":"2023-10-04T22:21:10","slug":"vulnerabilities-in-supermicro-bmcs-could-allow-for-unkillable-server-rootkits","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1188946","title":{"rendered":"Vulnerabilities in Supermicro BMCs could allow for unkillable server rootkits"},"content":{"rendered":"<div id=\"rss-wrap\">\n<figure class=\"intro-image intro-left\">\n  <img decoding=\"async\" src=\"https:\/\/www.prime-wow.com\/wp-content\/uploads\/2023\/10\/chip-based-rootkit-800x534-1.jpe\" alt=\"Vulnerabilities in Supermicro BMCs could allow for unkillable server rootkits\" \/><\/p>\n<p class=\"caption\" style=\"font-size:0.8em\"><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2022\/07\/chip-based-rootkit.jpeg\" class=\"enlarge-link\" data-height=\"667\" data-width=\"1000\">Enlarge<\/a> (credit: Getty Images)<\/p>\n<\/figure>\n<div><a name=\"page-1\" \/><\/div>\n<p>If your organization uses servers that are equipped with baseboard management controllers from Supermicro, it\u2019s time, once again, to patch seven high-severity vulnerabilities that attackers could exploit to gain control of them. And sorry, but the fixes must be installed manually.<\/p>\n<p>Typically abbreviated as BMCs, baseboard management controllers are small chips that are soldered onto the motherboard of servers inside data centers. Administrators rely on these powerful controllers for various remote management capabilities, including installing updates, monitoring temperatures and setting fan speeds accordingly, and reflashing the UEFI system firmware that allows servers to load their operating systems during reboots. BMCs provide these capabilities and more, even when the servers they\u2019re connected to are turned off.<\/p>\n<h2>Code execution inside the BMC? Yup<\/h2>\n<p>The potential for vulnerabilities in BMCs to be exploited and used to take control of servers hasn\u2019t been lost on hackers. In 2021, hackers exploited a vulnerability in BMCs from HP Enterprise and installed a custom rootkit, researchers from Amnpardaz, a security firm in Iran, <a href=\"https:\/\/threats.amnpardaz.com\/en\/2021\/12\/28\/implant-arm-ilobleed-a\/\">reported<\/a> that year. ILObleed, as the researchers named the rootkit, hid inside the iLO, a module in HPE BMCs that\u2019s short for Integrated Lights-Out.<\/p>\n<\/div>\n<p><a href=\"https:\/\/arstechnica.com\/?p=1973415#p3\">Read 13 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1973415&amp;comments=1\">Comments<\/a><\/p>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: Ars Technica &#8211; <a href=\"https:\/\/arstechnica.com\/?p=1973415\" target=\"_blank\" rel=\"noopener\">Vulnerabilities in Supermicro BMCs could allow for unkillable server rootkits<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enlarge (credit: Getty Images) If your organization uses servers that are equipped with baseboard management controllers from Supermicro, it\u2019s time, once again, to patch seven high-severity vulnerabilities that attackers could exploit to gain control of them. And sorry, but the &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1188946\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1188947,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-1188946","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1188946","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1188946"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1188946\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1188947"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1188946"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1188946"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1188946"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}