Critical motherboard flaw exposes thousands of enterprise servers to remote backdoors
Source: Ars Technica
Researchers discovered exploitable vulnerabilities in BMC (baseboard management controller) firmware across Dell, HP, and Lenovo servers. The flaws allow unauthenticated remote attackers to gain persistent access below the operating system level—the "lights-out" management layer that survives OS wipes and reboots. A compromised BMC lets attackers control the entire server regardless of what software runs on top. Security teams rarely audit BMCs or know how to patch them, leaving a blind spot in enterprise hardware that has grown more connected and more complex.