<style> * { padding: 0; margin: 0; } *, :after, :before { box-sizing: border-box; } .nav-global { background-color: #f0f0f0; display: none; padding: 0 1rem; } ul { display: flex; font-size: .8125rem; margin: 0; padding: 0; height: 100%; } li { list-style: none; position: relative; margin: 0 .75rem; } li:first-child { margin-left: 0; } li:last-child { margin-right: 0; } li a { display: flex; align-items: center; padding: 1rem 0; text-decoration: none; color: #474747; } li a:hover:after, li:hover>a:after { content: ""; border-bottom: 3px solid #80c343; position: absolute; left: 0; bottom: 0; min-width: 100%; z-index: 1; } @media (min-width: 900px) { .nav-global { display: flex; justify-content: space-between; align-items: center; } ul { font-size: .875rem; } } <style> @font-face {font-family: 'Material Icons'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2'); } .material-icons {font-family: 'Material Icons'; font-weight: normal; font-style: normal; font-size: 24px; line-height: 1; letter-spacing: normal; text-transform: none; display: inline-block; white-space: nowrap; word-wrap: normal; direction: ltr; -webkit-font-feature-settings: 'liga'; -webkit-font-smoothing: antialiased; } .footer *,:after,:before {box-sizing: border-box} footer,nav,section {display: block } .footer {font-size: 16px; scroll-behavior: smooth; margin: 0; font-family: 'Noto Sans',sans-serif; font-weight: 400; line-height: 1.5; -webkit-text-size-adjust: 100%; -webkit-tap-highlight-color: rgba(0,0,0,0); -ms-text-size-adjust: 100%; -ms-overflow-style: scrollbar;} .footer ol, .footer ul {padding-left: 2rem; margin-top: 0; margin-bottom: 1rem } .footer img {vertical-align: middle } .footer p {font-size: 1rem; font-weight: 400; line-height: 1.5; margin-top: 0; margin-bottom: 1rem } .footer a {text-decoration: none; color: #222; font-size: inherit; font-weight: inherit;} .footer a:hover {text-decoration: underline;color: inherit;} .footer-nav {display: flex; flex-wrap: wrap; width: 100%; background-color: #fafafa; } .footer-nav__section {flex: 1 1 25% } p.footer-nav__title {font-size: 1rem; font-weight: 600; margin: 0; position: relative } .footer-nav__caret {position: absolute; right: 1rem; font-size: 34px; color: #80c343 } ul.footer-nav__list {margin: 0; padding: 0; height: 0; visibility: hidden; transition: transform .1s ease-in-out; transform: scaleY(0); transform-origin: top } .is-open ul.footer-nav__list {visibility: visible; transform: scaleY(1); height: auto; transition: transform .3s ease-in-out } .footer-nav__item .footer-nav__link {padding-left: 0 } .footer-nav__item:last-child .footer-nav__link {border: 0 } .footer-nav__link {display: block; padding: 1.5rem 1rem } .footer-nav__link:hover {text-decoration: none } .is-open .footer-nav__link>.material-icons {transform: rotate(180deg) } ul.footer-nav__list li {font-size: .875rem; list-style: none; padding: 0 26px } ul.footer-nav__list li a {display: block; padding: 1.5rem 1rem; font-size: .875rem; color: #222; } ul.footer-nav__list li a:hover {text-decoration: none } ul.footer-nav__list li:last-child a {border: 0 } .is-open ul.footer-nav__list li a > .material-icons {transform: rotate(180deg) } .footer-bottom {display: flex; flex-wrap: wrap; justify-content: center; padding: 2rem 1.5rem; background-color: #1a1a1a; color: #fafafa } .footer-bottom .nav-legal {width: 100%; text-align: center } .footer-bottom .nav-legal .menu--legal {display: block; margin: 0 0 1rem; padding: 0; width: 100% } .footer-bottom .nav-legal .menu--legal li {display: inline-flex; font-size: .8125rem; border-right: 1px solid #89898b; padding: 0 .5rem } .footer-bottom .nav-legal .menu--legal li:last-child {border: 0; padding-right: 0;} .footer-bottom .nav-legal .menu--legal li:first-child {padding-left: 0;} .footer-bottom .nav-legal .menu--legal a {padding: 1px; color: #fafafa;} .footer-bottom .nav-legal .menu--legal a:hover {color: #fff;} .footer-bottom .social {display: flex; width: 100%; justify-content: center } .footer-bottom .social .social__list {list-style: none; padding: 0; margin: 0; display: inline-flex; flex-direction: row; flex-wrap: wrap; justify-content: flex-start; max-width: 260px } .footer-bottom .social li {background-color: #474747; border-radius: 9999px; height: 34px; width: 34px; display: flex; flex-direction: column; align-items: center; justify-content: center; margin: 0 15px 30px } .footer-bottom .social li a {display: block; color: #fff; display: flex; flex-direction: column; align-items: center; justify-content: center } .footer-bottom .social li a:hover {color: #80c343; text-decoration: none } .footer-bottom .locale {display: flex; justify-content: center; align-items: center; width: 100% } .footer-bottom .locale .material-icons {color: #767676; margin-right: .5rem; font-size: 1.125rem } .footer-bottom .locale:hover .material-icons {text-decoration: none } .footer-bottom .locale .locale__text {font-size: .8125rem; color: #fafafa } .footer-bottom .copyright {font-size: 10px; color: grey; text-align: center; width: 100% } .footer-bottom .copyright p {font-size: .625rem; color: #fff } @media(min-width: 640px) { .footer-bottom .social .social__list {max-width:100% } } @media(min-width: 900px) { .footer-nav {flex-direction:row; flex-wrap: nowrap; justify-content: space-between; padding: 3rem 1.5rem } p.footer-nav__title {font-size:1.25rem; } p.footer-nav__title a {cursor: text;} .footer-nav__item {border:0; padding: 0 } .footer-nav__link {padding:.2rem 0 } .footer-nav__link:hover {text-decoration:underline } ul.footer-nav__list {height:100%; visibility: visible; transform: scaleY(1) } ul.footer-nav__list li {border:0; padding: 0; font-size:.875rem; } ul.footer-nav__list li a {padding:.2rem 0; } ul.footer-nav__list li a:hover {text-decoration:underline; } .footer-nav__caret {display: none; } .footer-bottom .nav-legal {width:50%; text-align: left } .footer-bottom .nav-legal .menu--legal li {font-size:.875rem } .footer-bottom .social {width:50%; justify-content: flex-end } .footer-bottom .social li {margin:0 6px 15px } .footer-bottom .locale {width:50%; justify-content: flex-end } .footer-bottom .locale .locale__text {font-size:.875rem } .footer-bottom .copyright {width:50%; text-align: left } .footer-bottom .copyright p {font-size:.75rem } } @media(max-width: 899px) { .footer-nav__section {flex: 1 1 100%; border-bottom: 1px solid #c9c9c9 } .footer-nav__section:last-child {border: 0;} .footer-nav__link {border-bottom: 1px solid #c9c9c9;} p.footer-nav__title {font-size: 1rem; font-weight: 600; } } <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KR777P" height="0" width="0" style="display:none;visibility:hidden"></iframe>

Acer-Antworten Security & Vulnerabilities

Anfällige BMC-Firmware von Enterprise-Servern

DETAILS ZUR SCHWACHSTELLE:

Forscher haben eine Vulnerabilität mit Vertiv BMC (Baseboard Management Controller) identifiziert, die dazu führen kann, dass der Server gehackt wird, um einen Codeangriff auszuführen.

Eine Schwachstelle ist, dass die BMC-Firmware keine kryptografische Signaturprüfung durchführt, bevor sie Updates empfängt und in den SPI-Flash-Speicher schreibt.

Die zweite Schwachstelle ist, dass das Firmware-Update eine Schwachstelle bei der Befehlsinjektion aufweist.

Beide Schwachstellen ermöglichen es einem Angreifer, die Host-Administratorrechte zu verwenden, um beliebigen Code auf der Firmware auszuführen und dauerhafte Änderungen an den SPI-Flash-Speicherinhalten im BMC vorzunehmen. Der Angreifer kann auch die BMC-Umgebung ändern, um zukünftige Firmware-Updates durch den Software-Mechanismus zu verhindern, so dass der BMC dauerhaft zerstört werden kann.

Wirkungsbereich:

Acer Altos Server mit ASPEED AST2300 / AST2400 / AST2500 BMCs mit Vertiv Avocent MergePoint EMS Firmware.

Auflösung:

Acer arbeitet eng mit Anbietern zusammen, um bestimmte Schwachstellen der Firmware des Baseboard Management Controllers (BMC) zu beheben, die einige seiner Altos-Serverprodukte betreffen. Wir empfehlen unseren Kunden, ihr Risiko zu begrenzen, indem sie gemeinsame Sicherheits-Best-Practices befolgen, den privilegierten Zugriff auf vertrauenswürdige Administratoren einschränken und die neuesten BMC-Firmware-Updates anwenden, sobald sie verfügbar sind. Links zu diesen Updates werden unten veröffentlicht, sobald sie verfügbar sind.

Betroffene Acer Modelle:

Altos T310 F3

BMC Firmware - v1.41

AR460 F3

BMC Firmware - v8.86

AR480 F3

BMC Firmware - v8.86

Altos W2050-W270h F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

CMC Firmware - v1.34

Altos R480 F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

Altos W2200-W670h F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

CMC Firmware - v1.34

Altos R369 F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

Altos R389 F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

Mehr Informationen

Für weitere Informationen besuchen Sie bitte https://eclypsium.com/wp-content/uploads/2019/07/Vulnerable-Firmware-in-the-Supply-Chain.pdf

Haftungsausschluss

DIE OBEN GENANNTEN INFORMATIONEN WERDEN "WIE BESEHEN" IN VERBINDUNG MIT DEN ACER- UND INTEL®-PRODUKTEN ZUR VERFÜGUNG GESTELLT. IHRE NUTZUNG DER AUF DIESER SEITE VERLINKTEN INFORMATIONEN ODER MATERIALIEN ERFOLGT AUF EIGENE GEFAHR. ACER BEHÄLT SICH DAS RECHT VOR, DIESE SEITE JEDERZEIT ZU ÄNDERN ODER ZU AKTUALISIEREN.

<style> * { padding: 0; margin: 0; } *, :after, :before { box-sizing: border-box; } .nav-global { background-color: #f0f0f0; display: none; padding: 0 1rem; } ul { display: flex; font-size: .8125rem; margin: 0; padding: 0; height: 100%; } li { list-style: none; position: relative; margin: 0 .75rem; } li:first-child { margin-left: 0; } li:last-child { margin-right: 0; } li a { display: flex; align-items: center; padding: 1rem 0; text-decoration: none; color: #474747; } li a:hover:after, li:hover>a:after { content: ""; border-bottom: 3px solid #80c343; position: absolute; left: 0; bottom: 0; min-width: 100%; z-index: 1; } @media (min-width: 900px) { .nav-global { display: flex; justify-content: space-between; align-items: center; } ul { font-size: .875rem; } } <style> @font-face {font-family: 'Material Icons'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2'); } .material-icons {font-family: 'Material Icons'; font-weight: normal; font-style: normal; font-size: 24px; line-height: 1; letter-spacing: normal; text-transform: none; display: inline-block; white-space: nowrap; word-wrap: normal; direction: ltr; -webkit-font-feature-settings: 'liga'; -webkit-font-smoothing: antialiased; } .footer *,:after,:before {box-sizing: border-box} footer,nav,section {display: block } .footer {font-size: 16px; scroll-behavior: smooth; margin: 0; font-family: 'Noto Sans',sans-serif; font-weight: 400; line-height: 1.5; -webkit-text-size-adjust: 100%; -webkit-tap-highlight-color: rgba(0,0,0,0); -ms-text-size-adjust: 100%; -ms-overflow-style: scrollbar;} .footer ol, .footer ul {padding-left: 2rem; margin-top: 0; margin-bottom: 1rem } .footer img {vertical-align: middle } .footer p {font-size: 1rem; font-weight: 400; line-height: 1.5; margin-top: 0; margin-bottom: 1rem } .footer a {text-decoration: none; color: #222; font-size: inherit; font-weight: inherit;} .footer a:hover {text-decoration: underline;color: inherit;} .footer-nav {display: flex; flex-wrap: wrap; width: 100%; background-color: #fafafa; } .footer-nav__section {flex: 1 1 25% } p.footer-nav__title {font-size: 1rem; font-weight: 600; margin: 0; position: relative } .footer-nav__caret {position: absolute; right: 1rem; font-size: 34px; color: #80c343 } ul.footer-nav__list {margin: 0; padding: 0; height: 0; visibility: hidden; transition: transform .1s ease-in-out; transform: scaleY(0); transform-origin: top } .is-open ul.footer-nav__list {visibility: visible; transform: scaleY(1); height: auto; transition: transform .3s ease-in-out } .footer-nav__item .footer-nav__link {padding-left: 0 } .footer-nav__item:last-child .footer-nav__link {border: 0 } .footer-nav__link {display: block; padding: 1.5rem 1rem } .footer-nav__link:hover {text-decoration: none } .is-open .footer-nav__link>.material-icons {transform: rotate(180deg) } ul.footer-nav__list li {font-size: .875rem; list-style: none; padding: 0 26px } ul.footer-nav__list li a {display: block; padding: 1.5rem 1rem; font-size: .875rem; color: #222; } ul.footer-nav__list li a:hover {text-decoration: none } ul.footer-nav__list li:last-child a {border: 0 } .is-open ul.footer-nav__list li a > .material-icons {transform: rotate(180deg) } .footer-bottom {display: flex; flex-wrap: wrap; justify-content: center; padding: 2rem 1.5rem; background-color: #1a1a1a; color: #fafafa } .footer-bottom .nav-legal {width: 100%; text-align: center } .footer-bottom .nav-legal .menu--legal {display: block; margin: 0 0 1rem; padding: 0; width: 100% } .footer-bottom .nav-legal .menu--legal li {display: inline-flex; font-size: .8125rem; border-right: 1px solid #89898b; padding: 0 .5rem } .footer-bottom .nav-legal .menu--legal li:last-child {border: 0; padding-right: 0;} .footer-bottom .nav-legal .menu--legal li:first-child {padding-left: 0;} .footer-bottom .nav-legal .menu--legal a {padding: 1px; color: #fafafa;} .footer-bottom .nav-legal .menu--legal a:hover {color: #fff;} .footer-bottom .social {display: flex; width: 100%; justify-content: center } .footer-bottom .social .social__list {list-style: none; padding: 0; margin: 0; display: inline-flex; flex-direction: row; flex-wrap: wrap; justify-content: flex-start; max-width: 260px } .footer-bottom .social li {background-color: #474747; border-radius: 9999px; height: 34px; width: 34px; display: flex; flex-direction: column; align-items: center; justify-content: center; margin: 0 15px 30px } .footer-bottom .social li a {display: block; color: #fff; display: flex; flex-direction: column; align-items: center; justify-content: center } .footer-bottom .social li a:hover {color: #80c343; text-decoration: none } .footer-bottom .locale {display: flex; justify-content: center; align-items: center; width: 100% } .footer-bottom .locale .material-icons {color: #767676; margin-right: .5rem; font-size: 1.125rem } .footer-bottom .locale:hover .material-icons {text-decoration: none } .footer-bottom .locale .locale__text {font-size: .8125rem; color: #fafafa } .footer-bottom .copyright {font-size: 10px; color: grey; text-align: center; width: 100% } .footer-bottom .copyright p {font-size: .625rem; color: #fff } @media(min-width: 640px) { .footer-bottom .social .social__list {max-width:100% } } @media(min-width: 900px) { .footer-nav {flex-direction:row; flex-wrap: nowrap; justify-content: space-between; padding: 3rem 1.5rem } p.footer-nav__title {font-size:1.25rem; } p.footer-nav__title a {cursor: text;} .footer-nav__item {border:0; padding: 0 } .footer-nav__link {padding:.2rem 0 } .footer-nav__link:hover {text-decoration:underline } ul.footer-nav__list {height:100%; visibility: visible; transform: scaleY(1) } ul.footer-nav__list li {border:0; padding: 0; font-size:.875rem; } ul.footer-nav__list li a {padding:.2rem 0; } ul.footer-nav__list li a:hover {text-decoration:underline; } .footer-nav__caret {display: none; } .footer-bottom .nav-legal {width:50%; text-align: left } .footer-bottom .nav-legal .menu--legal li {font-size:.875rem } .footer-bottom .social {width:50%; justify-content: flex-end } .footer-bottom .social li {margin:0 6px 15px } .footer-bottom .locale {width:50%; justify-content: flex-end } .footer-bottom .locale .locale__text {font-size:.875rem } .footer-bottom .copyright {width:50%; text-align: left } .footer-bottom .copyright p {font-size:.75rem } } @media(max-width: 899px) { .footer-nav__section {flex: 1 1 100%; border-bottom: 1px solid #c9c9c9 } .footer-nav__section:last-child {border: 0;} .footer-nav__link {border-bottom: 1px solid #c9c9c9;} p.footer-nav__title {font-size: 1rem; font-weight: 600; } }