{"uuid": "fbeb2f0a-e581-49aa-bf84-02904953c494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40289", "type": "seen", "source": "https://t.me/hacking_Attack/121669", "content": "IPMI software. When combined with CVE-2023-40289, attackers could execute code injection, potentially triggered by malicious links or phishing emails, setting the stage for server takeover.\nTrending: Maximizing IDOR Detection with Burp Suite\u2019s Autorize Trending: Recon Tool: Mantra\nWhile there is no concrete evidence of malicious exploitation of these vulnerabilities in the wild, the number of internet-exposed Supermicro IPMI web interfaces exceeded 70,000 at the start of October 2023, signaling the urgency of addressing this threat.\n\nIn summary, these vulnerabilities expose Supermicro servers to significant risks, including remote compromise of the BMC system. Subsequent access to the server\u2019s operating system could be achieved through legitimate remote control BMC functionality or by installing malicious firmware. This scenario raises concerns about lateral movement within internal networks and the compromise of other vulnerable hosts.\n\nThis situation echoes similar vulnerabilities discovered earlier this year in AMI MegaRAC BMCs, underscoring the critical importance of securing BMC firmware in server environments.\nTrending: Hackers Employ ZeroFont Trick in Phishing Emails to Bypass Security Checks Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: thehackernews.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-23-300x150.png Apple\u2019s Emergency Fix: Zero-Day Exploit Puts iPhone and iPad Security at Risk\nOctober 5, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-22-300x150.png Gaining Root Control: Looney Tunables\u2019 Linux Vulnerability Raises Alarms\nOctober 4, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-21-300x150.png Meet BunnyLoader: The Rapidly Evolving Malware-as-a-Service\nOctober 3, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-20-300x150.png Cloudflare DDoS Safeguards Ironically Exploited via Cloudflare\nOctober 2, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking Course\n\nBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security Solutions\n\nFind out how Pentesting Services can help you.\nThe post Supermicro\u2019s BMCs Under Siege, Critical Vulnerabilities Open Doors to Attackers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-04T03:00:04.353317Z"}