Notes


CVE-2024-54085: Critical BMC Flaw Exposes Servers to Total Takeover

A critical vulnerability has been identified in MegaRAC Baseboard Management Controller (BMC) software, developed by American Megatrends International (AMI), enabling attackers to seize control over servers and potentially render them inoperable.

MegaRAC BMC is a remote server management platform that enables administrators to oversee hardware without physical access. This technology is widely utilized across server products from over ten major vendors, including HPE, Asus, ASRock, and various other providers catering to cloud infrastructures and data centers. CVE-2024-54085: Critical BMC Flaw Exposes Servers to Total Takeover