{"id":91382,"date":"2020-08-12T13:42:03","date_gmt":"2020-08-12T11:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3"},"modified":"2020-08-12T13:42:03","modified_gmt":"2020-08-12T11:42:03","slug":"udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3","title":{"rendered":"Dob\u00ebsi e larg\u00ebt n\u00eb plakat serverike Intel me BMC Emulex Pilot 3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Intel njoftoi<\/a><\/noindex> p\u00ebr rregullimin e 22 dob\u00ebsive n\u00eb firmware-t e pllakave am\u00eb t\u00eb server\u00ebve t\u00eb saj, sistemeve server dhe moduleve t\u00eb llogaritjes. Tre dob\u00ebsi, nj\u00ebra prej t\u00eb cilave ka marr\u00eb nivelin kritik, (CVE-2020-8708<\/a><\/noindex> \u2014 CVSS 9.6, CVE-2020-8707<\/a><\/noindex> \u2014 CVSS 8.3, CVE-2020-8706<\/a><\/noindex> \u2014 CVSS 4.7) shfaqet<\/a><\/noindex> n\u00eb firmware-n e kontrollorit BMC Emulex Pilot 3, i p\u00ebrdorur n\u00eb produktet Intel. Dob\u00ebsit\u00eb lejojn\u00eb qasje pa autentifikim n\u00eb konsol\u00ebn e menaxhimit t\u00eb larg\u00ebt (KVM), p\u00ebr t\u00eb anashkaluar autentifikimin gjat\u00eb emulimit t\u00eb pajisjeve USB t\u00eb ruajtjes dhe p\u00ebr t\u00eb shkaktuar mbushje t\u00eb larg\u00ebt t\u00eb tamponit n\u00eb kernelin Linux t\u00eb p\u00ebrdorur n\u00eb BMC. <\/p>\n

Dob\u00ebsia CVE-2020-8708 i mund\u00ebson nj\u00eb sulmuesi t\u00eb paautentifikuar, q\u00eb ka qasje n\u00eb nj\u00eb segment t\u00eb zakonsh\u00ebm t\u00eb rrjetit lokal me serverin e prekur, t\u00eb ket\u00eb akses n\u00eb ambientin e menaxhimit BMC. V\u00ebrehet se teknika e shfryt\u00ebzimit t\u00eb dob\u00ebsis\u00eb \u00ebsht\u00eb shum\u00eb e thjesht\u00eb dhe e besueshme, pasi problemi shkaktohet nga nj\u00eb gabim arkitektonik. M\u00eb tej, sipas fjal\u00ebve<\/a><\/noindex> hulumtuesit q\u00eb zbuloi dob\u00ebsin\u00eb, \u00ebsht\u00eb m\u00eb e leht\u00eb t\u00eb punohet me BMC p\u00ebrmes nj\u00eb exploiti sesa me klientin e zakonsh\u00ebm Java. P\u00ebrmes pajisjeve t\u00eb prekura p\u00ebrmenden familjet e sistemeve server Intel R1000WT, R2000WT, R1000SP, LSVRP, LR1304SP, R1000WF dhe R2000WF, pllakat am\u00eb S2600WT, S2600CW, S2600KP, S2600TP, S1200SP, S2600WF, S2600ST dhe S2600BP, si dhe modul\u00ebt e llogaritjes HNS2600KP, HNS2600TP dhe HNS2600BP. Dob\u00ebsit\u00eb jan\u00eb rregulluar n\u00eb p\u00ebrdit\u00ebsimin e firmware 1.59.<\/p>\n

Sipas informacionit jo zyrtar t\u00eb dh\u00ebnave<\/a><\/noindex> firmware p\u00ebr BMC Emulex Pilot 3 \u00ebsht\u00eb shkruar n\u00eb kompanin\u00eb AMI, prandaj nuk p\u00ebrjashtohet<\/a><\/noindex> shfaqja e dob\u00ebsive edhe n\u00eb sistemet e prodhuesve t\u00eb tjer\u00eb. Problemet jan\u00eb t\u00eb pranishme n\u00eb patch-et e jashtme p\u00ebr kernelin Linux dhe procesin menaxhues q\u00eb punon n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, kodi i t\u00eb cil\u00ebve karakterizohet nga hulumtuesi q\u00eb zbuloi problemin si kodi m\u00eb i keq me t\u00eb cilin ka pasur p\u00ebr t\u00eb p\u00ebrballur.<\/p>\n

Kujtojm\u00eb se BMC p\u00ebrfaq\u00ebson nj\u00eb kontrollues t\u00eb specializuar t\u00eb instaluar n\u00eb server\u00eb, i cili ka CPU-n\u00eb, memorjen, ruajtjen dhe nd\u00ebrfaqet p\u00ebr pyetjen e sensor\u00ebve, i cili ofron nj\u00eb nd\u00ebrfaqe t\u00eb nivelit t\u00eb ul\u00ebt p\u00ebr monitorimin dhe menaxhimin e pajisjeve server. Me ndihm\u00ebn e BMC-s\u00eb, pavar\u00ebsisht nga sistemi operativ q\u00eb po punon n\u00eb server, \u00ebsht\u00eb e mundur t\u00eb ndiqet gjendja e sensor\u00ebve, t\u00eb menaxhohet energjia, firmuer\u00ebt dhe disk\u00ebt, t\u00eb organizohet ngarkimi i larg\u00ebt p\u00ebrmes rrjetit, t\u00eb sigurohet funksionimi i konsol\u00ebs s\u00eb aksesit t\u00eb larg\u00ebt etj. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 22 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439. \u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c, (CVE-2020-8708 — CVSS 9.6, CVE-2020-8707 — CVSS 8.3, CVE-2020-8706 — CVSS 4.7) \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 BMC-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Emulex Pilot 3, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Intel. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91382","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet i distanc\u00eb n\u00eb plakat e server\u00ebve Intel me BMC Emulex Pilot 3 | ProHoster","description":"Kompania Intel njoftoi se ka eliminuar 22 vulnerabilitete n\u00eb firmware-in e server\u00ebve t\u00eb saj.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0430\u0445 Intel \u0441 BMC Emulex Pilot 3 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 22 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-platah-intel-s-bmc-emulex-pilot-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-12T11:42:03+00:00","article:modified_time":"2020-08-12T11:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91382","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:28","updated":"2022-10-02 06:48:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91382","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=91382"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91382\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=91382"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=91382"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=91382"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}