20-year-old BMC vulnerability compromises thousands of data centers

Security researchers disclosed a decades-old vulnerability in BMC network management devices affecting thousands of data centers globally and exploitable in minutes. The flaw persists because organizations continue running outdated hardware no longer receiving vendor security updates.

7 reports · 5 independentother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

How We Hacked Thousands of Data Centers in Minutes Using a 20-Year-Old Vulnerability

stream:bsky-jetstreamother63d ago wire ×2 kagi ↗

I keep telling people that they gotta replace the devices on their networks that are running old software stacks and no longer receiving updates from the vendors. That includes printers and whatever else you’ve got. So many organizations don’t seem to understand the risk. lavahq.io/research/bmc... A 20-year-old vulnerability gave us access to bare-metal servers - and a foothold in the no man’s lan