Watch researchers remotely brick a server by corrupting its BMC & UEFI firmware

guest · Dec 19, 2018

Watch researchers remotely brick a server by corrupting its BMC & UEFI firmware
Attack is only a proof-of-concept, but one that can be as damaging as ransomware or disk-wiping malware
December 19, 2018
https://www.zdnet.com/article/watch...a-server-by-corrupting-its-bmc-uefi-firmware/

Their proof-of-concept attack is aimed at servers that feature a Baseboard Management Controller (BMC), a chip-on-chip system that allows for remote system management operations.

The attack portrayed in the video requires an attacker to gain access to a server beforehand, but researchers argue this isn't a big issue in today's software landscape where almost any software product is affected by a remotely exploitable vulnerability [...]

"This malicious BMC firmware update contains additional code that, once triggered, will erase the UEFI system firmware and critical components of the BMC firmware itself," they added.
Eclypsium researchers told ZDNet that the results of this attack are near permanent unless system administrators get down to the bottom of things and realize what happened.
Click to expand...

The company also plans to publish a blog post on this attack later today that will be made available here.
Click to expand...

Log in or Sign up

Watch researchers remotely brick a server by corrupting its BMC & UEFI firmware

guest Guest

Log in or Sign up

Watch researchers remotely brick a server by corrupting its BMC & UEFI firmware

guest Guest

Useful Searches