Severe BMC Vulnerabilities - Nate Warfield - PSW #766

<p>Eclypsium's research team has discovered 3 vulnerabilities in BMCs. Nate Warfield comes on the show to tell the full story! This has garnered much attention in the press:</p> <p>* Original research post: <a href= "https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/"> https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/</a></p> <p>* <a href= "https://www.securityweek.com/security-flaws-ami-bmc-can-expose-many-data-centers-clouds-attacks"> https://www.securityweek.com/security-flaws-ami-bmc-can-expose-many-data-centers-clouds-attacks</a></p> <p>* <a href= "https://thehackernews.com/2022/12/new-bmc-supply-chain-vulnerabilities.html"> https://thehackernews.com/2022/12/new-bmc-supply-chain-vulnerabilities.html</a></p> <p>* <a href= "https://therecord.media/three-vulnerabilities-found-in-popular-baseboard-software/"> https://therecord.media/three-vulnerabilities-found-in-popular-baseboard-software/</a></p> <p>* <a href= "https://www.bleepingcomputer.com/news/security/severe-ami-megarac-flaws-impact-servers-from-amd-arm-hpe-dell-others/"> https://www.bleepingcomputer.com/news/security/severe-ami-megarac-flaws-impact-servers-from-amd-arm-hpe-dell-others/</a></p> <p>* <a href= "https://duo.com/decipher/trio-of-megarac-bmc-flaws-could-have-long-range-effects"> https://duo.com/decipher/trio-of-megarac-bmc-flaws-could-have-long-range-effects</a></p> <p>* <a href= "https://www.csoonline.com/article/3682137/flaws-in-megarac-baseband-management-firmware-impact-many-server-brands.html"> https://www.csoonline.com/article/3682137/flaws-in-megarac-baseband-management-firmware-impact-many-server-brands.html</a></p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/psw">https://www.securityweekly.com/psw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/psw766">https://securityweekly.com/psw766</a></p>