BMC vulnerabilities (Lights Out) - runZero Research

runZero discovered multiple vulnerabilities affecting major Baseboard Management Controller (BMC) implementations (OpenBMC, Supermicro IPMI, HPE iLO, Dell iDRAC, AMI MegaRAC, Raritan, H3C HDM, Fujitsu) that can enable unauthorized control, disruption, bypass of segmentation, lateral movement, or persistence; coordinated disclosure and CVE publication are pending, with high-level mitigations advised such as patching, isolating management interfaces, restricting access to trusted networks or VPNs, and enhanced monitoring.