Key facts
- Thousands of internet-connected servers are vulnerable.
- Vulnerabilities exist in baseboard management controllers (BMCs).
- These flaws allow for remote backdooring of servers.
- Some vulnerabilities are over a decade old.
- The vulnerabilities are often found in the IPMI interface.
- Exploits can grant deep and persistent access to data centers.
Thousands of internet-connected servers face a significant security threat from critical vulnerabilities discovered in baseboard management controllers (BMCs), the components responsible for managing server hardware. These flaws, some of which have existed for more than a decade, are present in BMCs from major manufacturers and allow for remote backdooring of servers. The vulnerabilities are often found within the Intelligent Platform Management Interface (IPMI), a common protocol used for out-of-band management of server hardware. Exploiting these weaknesses can grant attackers deep and persistent access to data centers, bypassing traditional security measures. The implications are severe, as compromised BMCs can control server functions at a fundamental level, potentially leading to data theft, system disruption, or the use of compromised servers for malicious activities. The widespread nature of these vulnerabilities across numerous server models and manufacturers underscores a systemic issue in the security of server management hardware. Addressing these flaws requires manufacturers to release firmware updates, and data center operators to diligently apply these patches to mitigate the risk of exploitation.