According to analysis by firmware security firm Eclypsium, 7,799 HPE iLO (HPE's Integrated Lights-Out) server baseboard management controllers (BMCs) are exposed to the internet and most do not appear to be running the latest version of the firmware. But the problem doesn't stop there.
    • @X_CliOP
      2•2 years ago

      I don’t think iDrac are much better, though, in that regard.

      There have been and there will be many stories about these BMCs, unfortunately. One thing seems for sure: they should be in an isolated network or even better: unplugged.

        • @X_CliOP
          2•2 years ago

          Internet is that strange place where you find instances of stuff nobody should ever do 😆

  • @const_void
    2•2 years ago

    Supermicro have some of the worst. Even if you did properly secure it with a password the implementation is so buggy it’s likely fully of exploits anyway.