Researchers have uncovered new critical vulnerabilities in Supermicro's Baseboard Management Controller (BMC) firmware that could allow attackers to create persistent backdoors on affected servers. These flaws enable threat actors to maintain long-term unauthorized access by exploiting weaknesses in the BMC, which is responsible for remote management of server hardware. The vulnerabilities pose a significant risk to enterprise environments relying on Supermicro hardware, as attackers could bypass traditional security controls and maintain stealthy persistence. The discovery highlights the importance of timely firmware updates and robust security practices for hardware management components. Organizations using Supermicro servers are urged to apply patches and monitor for suspicious activity to mitigate potential exploitation. This article delves into the technical details of the vulnerabilities, their impact, and recommended mitigation strategies to protect critical infrastructure from advanced persistent threats targeting BMC firmware.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Wed, 24 Sep 2025 20:15:18 +0000