Supermicro bug allows 'virtual USBs' to take over corporate servers

Image
ANI Computers
Last Updated : Sep 03 2019 | 11:20 PM IST

A new type of Supermicro bug could potentially allow hackers to take down the entire network of computers on corporate servers using 'virtual USBs'.

Researchers from security firm Eclypsium revealed vulnerabilities in a number of Supermicro baseboard management controllers (BMC). The BMCs allow system admins to do things like load old software onto a server from a CD or upgrade an Operating System (OS) from an image on an external drive, Wired reported.

The flaw in the remote management device could allow an attacker to plug in a 'virtual' thumb drive laden with malware. The researchers notified Supermicro about the flaw discovered on Supermicro X9, X10, and X11 platforms in June and the company issued firmware updates for all the affected BMCs.

Disclaimer: No Business Standard Journalist was involved in creation of this content

*Subscribe to Business Standard digital and get complimentary access to The New York Times

Smart Quarterly

₹900

3 Months

₹300/Month

SAVE 25%

Smart Essential

₹2,700

1 Year

₹225/Month

SAVE 46%
*Complimentary New York Times access for the 2nd year will be given after 12 months

Super Saver

₹3,900

2 Years

₹162/Month

Subscribe

Renews automatically, cancel anytime

Here’s what’s included in our digital subscription plans

Exclusive premium stories online

  • Over 30 premium stories daily, handpicked by our editors

Complimentary Access to The New York Times

  • News, Games, Cooking, Audio, Wirecutter & The Athletic

Business Standard Epaper

  • Digital replica of our daily newspaper — with options to read, save, and share

Curated Newsletters

  • Insights on markets, finance, politics, tech, and more delivered to your inbox

Market Analysis & Investment Insights

  • In-depth market analysis & insights with access to The Smart Investor

Archives

  • Repository of articles and publications dating back to 1997

Ad-free Reading

  • Uninterrupted reading experience with no advertisements

Seamless Access Across All Devices

  • Access Business Standard across devices — mobile, tablet, or PC, via web or app

More From This Section

First Published: Sep 03 2019 | 11:05 PM IST

Next Story