IPMI/BMC vulnerabilities

[MartinD]

Just came across this from a UKNOF thread:


http://threatpost.com/ipmi-protocol-bmc-vulnerabilities-expose-thousands-of-servers-to-attack

 

[notFound]

Pretty sure that was an old vulnerability or maybe that's another or an imaginary one I was thinking of.

 

[kaniini]

This is why the BMCs should be on a private network not accessible from the internet, where the only external access is through a VPN.

 

[fapvps]

Does anyone actually have BMCs facing the open internet?

 

[jarland]

Does anyone actually have BMCs facing the open internet?

Every WSI/Datashack customer who requests IPMI and doesn't secure it, if you can even do that with the trashy one they use, certainly does. Google indexes a lot of these things. It's an all you can eat buffet of wide open onboard IPMI. Googling for fun I see universities, large corporations, and even government entities with the login pages publicly accessible.

 

[fixidixi]

Googling for fun I see universities, large corporations, and even government entities with the login pages publicly accessible.

Or just simply use shodan