BMC
An independent microcontroller on a server motherboard that provides out-of-band management functions, enabling remote access to and control of the host while it is powered off; it is an important component of server firmware security.
Timeline (last 90 days)
Modern servers also contain firmware in multiple places such as the BMC, network cards, RAID controllers and power supplies, each running independently and trusting one another.
The BMC has out-of-band management capability and can access the network and control the host even when the machine is powered off.
There have been multiple cases in which BMC firmware vulnerabilities were exploited.
When assessing firmware vulnerabilities, it is necessary to distinguish whether the vulnerability lies in the main UEFI firmware, the BMC or peripheral firmware, as the exploitation paths and remediation methods differ greatly by location.
Management signals for integrated racks come from server BMCs, cooling unit local controllers, PDU power monitoring modules, and rack-level environmental sensors, using different protocols such as IPMI, Redfish, SNMP, and Modbus.
All Facts (5)
Modern servers also contain firmware in multiple places such as the BMC, network cards, RAID controllers and power supplies, each running independently and trusting one another.
50%UnverifiedThe BMC has out-of-band management capability and can access the network and control the host even when the machine is powered off.
50%UnverifiedThere have been multiple cases in which BMC firmware vulnerabilities were exploited.
50%UnverifiedWhen assessing firmware vulnerabilities, it is necessary to distinguish whether the vulnerability lies in the main UEFI firmware, the BMC or peripheral firmware, as the exploitation paths and remediation methods differ greatly by location.
50%UnverifiedManagement signals for integrated racks come from server BMCs, cooling unit local controllers, PDU power monitoring modules, and rack-level environmental sensors, using different protocols such as IPMI, Redfish, SNMP, and Modbus.
50%