Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Summary
A security analysis has revealed that thousands of servers globally are vulnerable to backdoors due to exploitable bugs in motherboard controllers from major manufacturers. These vulnerabilities in Baseboard Management Controllers (BMCs) pose a significant risk to server infrastructure.
IFF Assessment
The discovery of widespread vulnerabilities in critical server hardware components represents a significant threat to defenders, as it allows for potential deep compromise and control.
Severity
Given the widespread nature, the ability to gain persistent remote access, and the potential for complete system compromise by exploiting Baseboard Management Controllers, a high CVSS score is estimated, reflecting critical impact.
Defender Context
This highlights a critical supply chain risk within server hardware, specifically targeting the BMC which often operates out of band and can be difficult to monitor. Defenders must prioritize inventorying systems with vulnerable BMCs and applying available patches or workarounds urgently, as these components can be used for persistent access even if the main operating system is secured.