News for hackers. Stuff that matters.
Re:Escalation of Privilege Advisory by wiredfool on Monday May 01, 2017 @05:28PM (#14241845)
I'm mostly interested in if servers with ipmi (supermicro in particular) are vulnerable, and to what degree. If it's the network with the ipmi ports, that's one thing, but if it's public facing...

Much stuff is going to be hitting fans.

Re:Escalation of Privilege Advisory by amluto on Monday May 01, 2017 @06:33PM (#14242348)
IIUC the SuperMicro BMC is different software on a separate third-party chip. So it's reasonably likely to be vulnerable, but not to this particular vulnerability.
Re:Escalation of Privilege Advisory by ams6110 on Monday May 01, 2017 @07:23PM (#14242682)
Your IPMI should be on a private management network, at least. If you haven't done that, I hope you at least changed the default password.
Re:Escalation of Privilege Advisory by wiredfool on Tuesday May 02, 2017 @03:32AM (#14244605)
Yeah, that's pretty easy on this generation. But there was a previous generation where the IPMI piggybacked on one of the main NICs, where it was a lot easier to accidentally expose that to unfriendly traffic.