Vulnerabilitycritical
Firmware vulnerabilities in millions of computers could give hackers superuser status
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-34330+1 related CVE | AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface | 8.8 group max | <1% |
From the original article
6 min read at arstechnica.com
BMCs give near-total control over entire fleets of servers. What happens when they’re hacked? Two years ago, ransomware crooks breached hardware-maker Gigabyte and dumped more than 112 gigabytes of data that included information from some of its most important supply-chain partners, including Intel and AMD.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.