m4ylame0wecm

joined 8 months ago
[–] m4ylame0wecm@lemmy.zip 7 points 17 hours ago

User interaction required was listed on the MSRC source, but that's also where "RCE" came from too.

[–] m4ylame0wecm@lemmy.zip 1 points 4 months ago* (last edited 4 months ago)

Vendor tech does maintenance and fails to check critical component of system; blames customer

Good tech.

[–] m4ylame0wecm@lemmy.zip 2 points 7 months ago

Does anybody know of a resource that's compiled known to be affected system or motherboard models using this specific BMC?

Eclypsium said the line of vulnerable AMI MegaRAC devices uses an interface known as Redfish. Server makers known to use these products include AMD, Ampere Computing, ASRock, ARM, Fujitsu, Gigabyte, Huawei, Nvidia, Supermicro, and Qualcomm. Some, but not all, of these vendors have released patches for their wares.