{"id":91382,"date":"2020-08-12T13:42:03","date_gmt":"2020-08-12T11:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3"},"modified":"2020-08-12T13:42:03","modified_gmt":"2020-08-12T11:42:03","slug":"udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3","title":{"rendered":"Fjerns\u00e5rbarhed i Intel-servermoduler med BMC Emulex Pilot 3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Intel i sin officielle blog og deler relevante diagrammer.<\/a><\/noindex> om at fjerne 22 s\u00e5rbarheder i firmware til deres servermoderkort, serversystemer og beregningsmoduler. Tre s\u00e5rbarheder, hvoraf en er vurderet som kritisk niveau, (CVE-2020-8708<\/a><\/noindex> \u2014 CVSS 9.6, CVE-2020-8707<\/a><\/noindex> \u2014 CVSS 8.3, CVE-2020-8706<\/a><\/noindex> \u2014 CVSS 4.7) optr\u00e6der<\/a><\/noindex> i firmware til BMC-controlleren Emulex Pilot 3, der anvendes i produkter fra Intel. S\u00e5rbarhederne g\u00f8r det muligt at f\u00e5 adgang til konsollen for fjernstyring (KVM) uden godkendelse, omg\u00e5 godkendelsen ved emulering af USB-lagringsenheder og for\u00e5rsage en fjernbuffer-overl\u00f8b i den anvendte BMC Linux-kerne. <\/p>\n

S\u00e5rbarheden CVE-2020-8708 giver en uautoriseret angriber med adgang til det samme lokalnetv\u00e6rk som den s\u00e5rbare server mulighed for at f\u00e5 adgang til BMC's kontrolmilj\u00f8. Det bem\u00e6rkes, at udnyttelsen af s\u00e5rbarheden er meget enkel og p\u00e5lidelig, da problemet skyldes en arkitektonisk fejl. Desuden, if\u00f8lge if\u00f8lge<\/a><\/noindex> den forsker, der opdagede s\u00e5rbarheden, er det meget lettere at arbejde med BMC via et exploit end ved hj\u00e6lp af den standard Java-klient. Bl.a. n\u00e6vnes Intel-serverfamilierne R1000WT, R2000WT, R1000SP, LSVRP, LR1304SP, R1000WF og R2000WF, moderkortene S2600WT, S2600CW, S2600KP, S2600TP, S1200SP, S2600WF, S2600ST og S2600BP samt beregningsmodulerne HNS2600KP, HNS2600TP og HNS2600BP. S\u00e5rbarhederne er blevet udrettet i firmwareopdateringen 1.59.<\/p>\n

If\u00f8lge uofficielle data<\/a><\/noindex> er firmware til BMC Emulex Pilot 3 skrevet af virksomheden AMI, s\u00e5 derfor det kan ikke udelukkes<\/a><\/noindex> kan s\u00e5rbarhederne ogs\u00e5 forekomme i systemer fra andre producenter. Problemer findes i eksterne patches til Linux-kernen og i det brugerrum, hvor den administrative proces k\u00f8rer, hvis kode er blevet karakteriseret af den forsker, der opdagede probleme, som den d\u00e5rligste kode, han har v\u00e6ret i kontakt med.<\/p>\n

Lad os huske, at BMC er en specialiseret controller, der installeres i servere, har sin egen CPU, hukommelse, lager og sensorinterfacer, som giver et lav-niveau interface til overv\u00e5gning og styring af serverhardware. Ved hj\u00e6lp af BMC kan man uafh\u00e6ngigt af det operativsystem, der k\u00f8rer p\u00e5 serveren, overv\u00e5ge sensortilstanden, styre str\u00f8m, firmware og diske, organisere fjernopstart over netv\u00e6rket, sikre funktionaliteten af fjernadgangskonsollen osv. <\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 22 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439. \u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c, (CVE-2020-8708 — CVSS 9.6, CVE-2020-8707 — CVSS 8.3, CVE-2020-8706 — CVSS 4.7) \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 BMC-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Emulex Pilot 3, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Intel. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91382","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fjerns\u00e5rbarhed i Intel-serverplader med BMC Emulex Pilot 3 | ProHoster","description":"Intel har annonceret, at 22 s\u00e5rbarheder er blevet rettet i firmware til deres servere.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0430\u0445 Intel \u0441 BMC Emulex Pilot 3 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 22 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-12T11:42:03+00:00","article:modified_time":"2020-08-12T11:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91382","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:28","updated":"2022-10-02 06:48:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/91382","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=91382"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/91382\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=91382"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=91382"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=91382"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}