Skip to main content

Many servers expose insecure out-of-band management interfaces to the Internet


Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
Lucian Constantin Jun 6, 2014 Many servers expose insecure management interfaces to the Internet through microcontrollers embedded into the motherboard that run independently of the main OS and provide monitoring and administration functions.
These Baseboard Management Controllers (BMCs) are part of the Intelligent Platform Management Interface (IPMI), a standardized interface made up of a variety of sensors and controllers that allow administrators to manage servers remotely when they’re shut down or unresponsive, but are still connected to the power supply.
BMCs are embedded systems that run inside servers and have their own firmware—usually based on Linux. They provide IPMI access through a network service accessible over UDP port 623.
 
Full Article

0 replies

Be the first to reply!