Buggy Motherboard Controllers Expose Thousands of Enterprise Servers to Backdoors

Cybersecurity researchers have uncovered a critical firmware vulnerability affecting Baseboard Management Controllers (BMCs) across thousands of enterprise server hardware models. The flaw allows remote, unauthenticated attackers to bypass authentication protocols and write persistent backdoors directly into low-level motherboard flash memory. Because BMCs operate independently of the primary host operating system with full privileges over hardware components, compromised controllers allow attackers to monitor network traffic, manipulate memory contents, and survive complete OS reinstallation and storage wipes. Security firms warn that thousands of internet-exposed management interfaces remain vulnerable.