Re:Reverse engineering Dell iDRAC to get rid of GPU throttling
by hsbauauvhabzb on Wednesday May 10, 2023 @06:33PM
(#35894392)
I found that if you leave your bmc unplugged on a super micro, it’ll conveniently bridge it to whatever other Ethernet is plugged in, meaning an outage of your management network may roll over to another network unintentionally.
Id put money on there being preauth vulnerabilities in those things, judging by the engineering quality.
Re:Reverse engineering Dell iDRAC to get rid of GPU throttling
by neilv on Wednesday May 10, 2023 @07:21PM
(#35894921)
That sounds like showstopper for many sites.
On a much less-important note, it might explain some weirdness I'm seeing lately with one of my home Supermicro servers. (The docs say the BMC should only listen on one port, but the switch still sees some degree of responsiveness on the normal non-management port when "off".)
I mostly work in the cloud now but when I last had to manage a bunch of physical machines we had a physically separate network accessed via its own VPN to get onto the BMCs. Because yeah, the security situation was a joke.