Critical flaws in server motherboard controllers expose thousands to backdoors

Thousands of servers worldwide are vulnerable to backdoor attacks due to security flaws found in baseboard management controllers (BMCs). BMCs are low-level hardware components used to remotely manage servers, and are manufactured by some of the world's largest hardware vendors. Researchers discovered that these controllers contain significant security weaknesses that could allow attackers to gain persistent, deep-level access to affected systems. The vulnerabilities are particularly serious because BMCs operate independently of the main operating system, making malicious access difficult to detect or remove. The findings highlight widespread security shortcomings across the server hardware industry at a fundamental infrastructure level.