Tuam txhab Eclypsium ob qhov tsis zoo nyob rau hauv lub firmware ntawm BMC maub los muab rau hauv Lenovo ThinkServer servers, tso cai rau ib tus neeg siv hauv zos hloov cov firmware lossis ua tiav cov cai ntawm BMC nti sab.
Kev tshuaj xyuas ntxiv tau pom tias cov teeb meem no tseem cuam tshuam rau firmware ntawm BMC controllers siv hauv Gigabyte Enterprise Servers servers platforms, uas kuj tau siv hauv servers los ntawm cov tuam txhab xws li Acer, AMAX, Bigtera, Ciara, Penguin Computing thiab sysGen. Cov teeb meem BMC tswj tau siv qhov tsis zoo MergePoint EMS firmware tsim los ntawm tus neeg muag khoom thib peb Avocent (tam sim no kev faib ntawm Vertiv).
Thawj qhov tsis zoo yog tshwm sim los ntawm qhov tsis muaj cryptographic pov thawj ntawm downloaded firmware hloov tshiab (tsuas yog siv CRC32 checksum pov thawj, tsis yog. NIST siv cov ntawv kos npe digital), uas tso cai rau tus neeg tawm tsam nrog kev nkag mus rau hauv cheeb tsam rau qhov tsis zoo rau BMC firmware. Qhov teeb meem, piv txwv li, tuaj yeem siv los sib koom ua ke nrog cov rootkit uas tseem ua haujlwm tom qab rov txhim kho lub operating system thiab thaiv kev hloov kho firmware ntxiv (kom tshem tawm cov rootkit, koj yuav tsum tau siv tus programmer los sau dua SPI flash).
Qhov thib ob qhov tsis zoo yog tam sim no nyob rau hauv firmware hloov tshiab code thiab tso cai rau koj los hloov koj tus kheej cov lus txib, uas yuav raug tua nyob rau hauv BMC nrog rau theem siab tshaj ntawm cov cai. Txhawm rau tawm tsam, nws txaus los hloov tus nqi ntawm RemoteFirmwareImageFilePath parameter hauv bmcfwu.cfg teeb tsa cov ntaub ntawv, los ntawm txoj kev mus rau cov duab ntawm cov firmware tshiab tau txiav txim siab. Thaum lub sijhawm hloov tshiab tom ntej, uas tuaj yeem pib los ntawm kev hais kom ua hauv IPMI, qhov ntsuas no yuav ua tiav los ntawm BMC thiab siv los ua ib feem ntawm popen() hu ua ib feem ntawm kab rau /bin / sh. Txij li cov kab rau tsim cov lus txib ntawm lub plhaub yog tsim siv snprintf() hu yam tsis muaj kev tu kom zoo ntawm cov cim tshwj xeeb, cov neeg tawm tsam tuaj yeem hloov lawv cov cai rau kev tua. Txhawm rau siv qhov tsis zoo, koj yuav tsum muaj txoj cai uas tso cai rau koj xa cov lus txib mus rau BMC maub los ntawm IPMI (yog tias koj muaj cai tswj hwm ntawm lub server, koj tuaj yeem xa IPMI cov lus txib yam tsis muaj kev lees paub ntxiv).
Gigabyte thiab Lenovo tau raug ceeb toom txog cov teeb meem rov qab rau Lub Xya Hli 2018 thiab tau tswj hwm kev tso tawm tshiab ua ntej cov ntaub ntawv tau tshaj tawm rau pej xeem. Lenovo tuam txhab firmware hloov tshiab rau lub Kaum Ib Hlis 15, 2018 rau ThinkServer RD340, TD340, RD440, RD540 thiab RD640 servers, tab sis tsuas yog tshem tawm qhov tsis zoo hauv lawv uas tso cai hloov pauv, txij li thaum lub sijhawm tsim kab ntawm servers raws li MergePoint EMS hauv 2014, firmware kev txheeb xyuas tau ua tiav siv tus lej kos npe digital tseem tsis tau nthuav dav thiab tsis tau tshaj tawm thawj zaug.
Thaum Lub Tsib Hlis 8 ntawm lub xyoo no, Gigabyte tso tawm firmware hloov tshiab rau motherboards nrog ASPEED AST2500 maub los, tab sis zoo li Lenovo, nws tsuas yog kho qhov kev hloov pauv qhov tsis zoo. Lub rooj tsav xwm tsis zoo raws li ASPEED AST2400 tseem nyob tsis muaj qhov hloov tshiab rau tam sim no. Gigabyte kuj hais txog kev hloov mus siv MegaRAC SP-X firmware los ntawm AMI. Xws li cov firmware tshiab raws li MegaRAC SP-X yuav muab rau cov tshuab ua ntej xa nrog MergePoint EMS firmware. Qhov kev txiav txim siab ua raws li Vertiv cov lus tshaj tawm tias nws yuav tsis txhawb nqa MergePoint EMS platform lawm. Nyob rau tib lub sijhawm, tsis muaj dab tsi tau tshaj tawm txog kev hloov kho firmware ntawm cov servers tsim los ntawm Acer, AMAX, Bigtera, Ciara, Penguin Computing thiab sysGen raws li Gigabyte boards thiab nruab nrog MergePoint EMS firmware yooj yim.
Cia peb nco qab tias BMC yog tus tswj hwm tshwj xeeb tau teeb tsa hauv cov servers, uas muaj nws tus kheej CPU, nco, cia thiab sensor kev sib tham sib cuam tshuam, uas muab cov theem qis rau kev saib xyuas thiab tswj cov khoom siv server. Siv BMC, tsis hais lub operating system khiav ntawm tus neeg rau zaub mov, koj tuaj yeem saib xyuas cov xwm txheej ntawm cov sensors, tswj lub zog, firmware thiab disks, teeb tsa cov chaw taws teeb booting hauv lub network, xyuas kom muaj kev ua haujlwm ntawm cov chaw taws teeb nkag, thiab lwm yam.
Tau qhov twg los: opennet.ru