Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

ZeroNights 2018, Alexandre Gazet's, Fabien (0xf4b) Perigaud's & Joffrey (@_Sn0rkY) Czarny's 'Turning Your BMC Into A Revolving Door'

January 05, 2019 by Marc Handelman in ZeroNights, Information Security, Conferences, Hardware Security, iLO Security, Education, Infrastructure Security

From The Video Description: "Unmonitored and unpatched BMC (remote administration hardware feature for servers) are an almost certain source of chaos. They have the potential to completely undermined the security of complex network infrastructures and data centers. Our on-going effort to analyze HPE iLO systems (4 and 5) resulted in the discovery of many vulnerabilities, the last one having the capacity to fully compromise the iLO chip from the host system itself. This talk will show how a combination of these vulnerabilities can turn an iLO BMC into a revolving door between an administration network and the production network." - via Alexandre Gazet's, Fabien (0xf4b) Perigaud's & Joffrey (@_Sn0rkY) Czarny - 'Turning Your BMC Into A Revolving Door'

H/T

January 05, 2019 /Marc Handelman
ZeroNights, Information Security, Conferences, Hardware Security, iLO Security, Education, Infrastructure Security
  • Newer
  • Older