The discovery of moderate to severe vulnerabilities in the baseboard management controllers (BMCs) used by 15 different vendors highlighted the danger of firmware flaws in December 2022. Because firmware lives closer to the hardware level, where more most security scanners cannot reach, it’s difficult to find and address vulnerabilities.

Source: Dark Reading: Cloud