Security experts highlights remote server management issues

HD Moore, Chief Research Officer at Rapid7, the company known for the Metasploit attack framework, has warned that care should be taken when using remote server management features. Moore has exposed major vulnerabilities in the IPMI 1.5 and 2.0 remote management protocols and in the firmware of many Baseboard Management Controllers (BMCs): These chips grant remote network access even when the actual server isn't in operation (out-of-band management). However, like industrial control systems, UPnP routers andservers for serial ports before it, the BMC firmware contains vulnerabilities that can easily be exploited by attackers.

Remote server management issues higlighted

Security experts highlights remote server management issues | The H Security