The frequency and severity of security issues found over the years in the firmware of baseboard management controllers (BMCs) present in server motherboards highlight an often overlooked, yet critical area of IT infrastructure security. The latest addition to the growing list of flaws are two vulnerabilities in a widely used “lights-out” management interface used by different server manufacturers. When exploited together, they could provide remote and local attackers full control over impacted servers at a low and hard-to-detect level.
