Severe BMC Vulnerabilities - Nate Warfield - PSW #766

Paul's Security Weekly (Video) · Security Weekly Productions

December 8, 202259m 17s

Audio is streamed directly from the publisher (dts.podtrac.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.

Original episode page

Show Notes

Eclypsium's research team has discovered 3 vulnerabilities in BMCs. Nate Warfield comes on the show to tell the full story! This has garnered much attention in the press:

* Original research post: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/

* https://www.securityweek.com/security-flaws-ami-bmc-can-expose-many-data-centers-clouds-attacks

* https://thehackernews.com/2022/12/new-bmc-supply-chain-vulnerabilities.html

* https://therecord.media/three-vulnerabilities-found-in-popular-baseboard-software/

* https://www.bleepingcomputer.com/news/security/severe-ami-megarac-flaws-impact-servers-from-amd-arm-hpe-dell-others/

* https://duo.com/decipher/trio-of-megarac-bmc-flaws-could-have-long-range-effects

* https://www.csoonline.com/article/3682137/flaws-in-megarac-baseband-management-firmware-impact-many-server-brands.html

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw766

← All episodes of Paul's Security Weekly (Video)