Eclypsium research on SuperMicro BMC/Redfish vulnerability

We published a new research about vulnerability in Supermicro BMCs (from X8 to X11 gen) which can be compromised from software to take full control (implant BMC or System Firmware) or even brick a system: https://t.co/axZnhSRrm5 with @jessemichael & @HackingThings pic.twitter.com/SKJAvRLI96

— Alex Bazhaniuk (@ABazhaniuk) September 6, 2018

New blog by Eclypsium research team:

Insecure #Firmware Updates in Server Management Systems: Supermicro #BMC Case Studyhttps://t.co/uoLyH39qKx pic.twitter.com/7kRjlGMtbo

— Eclypsium (@eclypsium) September 6, 2018

BMC is a critical subsystem on each server responsible for remote server management including recovering the host if it’s corrupted.

What if the BMC firmware itself can be infected?

Read @eclypsium‘s new research: https://t.co/ZuyJ9ScmUZ

— Yuriy Bulygin (@c7zero) September 6, 2018