Re:NordVPN confirms it was hacked
by lucb1e on Monday October 21, 2019 @11:10AM
(#21313163)
Depends on what kind. In case of idrac, yes; but it's weird that it was insecure by default in the first place. Usually credentials are configured and provided to the customer. Makes me think there might have been some other interface. Clarification is definitely needed.
[ Parent
| on HN ]
Re:NordVPN confirms it was hacked
by CiPHPerCoder on Monday October 21, 2019 @11:22AM
(#21313312)
It could have been something like https://www.zdnet.com/article/vulnerabilities-found-in-the-r...
There were many IPMI/iDRAC/etc. exploits published in the past few years. Throw a dart at a list of them, and you'll probably find one that was unpatched in most systems as of March 2018.