#LATEST ILO 2 FIRMWARE VERSION UPDATE#

Ultimately, this creates a challenge for enterprises in which there are many vulnerable systems, very high impacts in the case of an attack, and adversaries actively exploiting the devices in the wild.' The iLOBleed implant

#LATEST ILO 2 FIRMWARE VERSION UPDATE#

Supply chain issues can still exist even after deployment due to vulnerable updates or if adversaries are able to compromise a vendorвЂ™s update process. 'Vulnerabilities and misconfigurations can be introduced early in the supply chain before an organization ever takes ownership of a server. 'BMC vulnerabilities are also incredibly common and often overlooked when it comes to updates,' the Eclypsium researchers said in a new blog post following the iLOBleed reports. It's safe to say that across all server vendors, the number of BMC interfaces that can be attacked from the internet is in the tens or hundreds of thousands.

When other vulnerabilities were found in the BMC implementation of Supermicro servers in 2019, more than 47,000 publicly exposed Supermicro BMCs from over 90 different countries were exposed. One recent example is iLOBleed, a malicious BMC implant found in the wild by an Iranian cybersecurity company that targets Hewlett Packard Enterprise (HPE) Gen8 and Gen9 servers, but this is not the only such attack found over the years.ДЄccording to an analysis by firmware security firm Eclypsium, 7,799 HPE iLO (HPE's Integrated Lights-Out) server BMCs are exposed to the internet and most do not appear to be running the latest version of the firmware. Over the years, security researchers have found and demonstrated vulnerabilities in the BMC implementations of different server manufacturers and attackers have taken advantage of some of them.

These are known as baseboard management controllers (BMCs) and if they're not secured properly, they can open the door to highly persistent and hard-to-detect rootkits. All server manufacturers provide this functionality in firmware through a set of chips that run independent of the rest of the server and OS. Having the ability to remotely manage and monitor servers even when their main operating system becomes unresponsive is vital to enterprise IT administrators.

Latest ilo 2 firmware version