Numerous servers could be subjected to remote attacks with the exploitation of several vulnerabilities impacting Supermicro’s Baseboard Management Controller IPMI firmware, which have since been addressed in security updates, SecurityWeek reports. Attackers could remotely leverage the bugs, tracked as CVE-2023-40284 to CVE-2023-40290, to facilitate root access to BMC, according to Binarly, which discovered the vulnerabilities.
Source: SC Magazine