Thousands of servers can be backdoored by exploiting buggy motherboard controllers

Critical vulnerabilities in baseboard management controllers (BMCs) embedded in server motherboards can be exploited to remotely backdoor thousands of internet-connected servers. These BMCs, found in virtually every enterprise server, operate as miniature computers with their own operating system firmware, network stack, and IP address. Researchers have identified vulnerabilities, some of which are over a decade old, that can be used to gain unauthorized access to servers sold by major manufacturers. The vulnerabilities are particularly concerning as BMCs are used by administrators to monitor the physical status of servers, making them a prime target for attackers. By exploiting these vulnerabilities, attackers can gain control over the server, allowing them to install malware, steal sensitive data, or disrupt operations¹. This vulnerability matters to security practitioners as it highlights the need to prioritize the security of BMCs and server motherboards to prevent potential backdoor attacks.