/* Begin GLOBAL */ *, *::before, *::after {box-sizing: border-box;} html { font-size: 16px; scroll-behavior: smooth; } body { margin: 0; color: #222; background-color: #fff; font-family: "Noto Sans", sans-serif; font-size: 1rem; font-weight: 400; line-height: normal; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; -ms-overflow-style: scrollbar; -webkit-tap-highlight-color: rgba(0,0,0,0); } img,svg { vertical-align: middle; } .body-l { font-size: 1rem; } .body-s { font-size: .79rem; } @supports(font-size: clamp(1rem, 1vw, 1rem)) { .body-l { font-size: clamp(1rem,.19vw + .96rem,1.13rem); } .body-s { font-size: clamp(.79rem,.15vw + .76rem,.89rem); } } /* End GLOBAL */ /* Begin HEADER */ .top-header a { color: #222; text-decoration: none; } .top-header p { line-height: normal; } .top-header .bs5-container { margin-left: auto; margin-right: auto; max-width: 1220px; padding-left: 24px; padding-right: 24px; width: 100%; } .top-header .bs5-row { display: flex; flex-wrap: wrap; margin-left: calc(1.5rem*-.5); margin-right: calc(1.5rem*-.5); } .top-header .bs5-row>* { max-width: 100%; padding-left: calc(1.5rem*.5); padding-right: calc(1.5rem*.5); } .top-header .bs5-col-12, .top-header .bs5-col-3 { flex: 0 0 auto; width: 25%; } .top-header .bs5-col-12 { width: 100%; } .top-header .icons_20 { height: 20px; width: 20px; vertical-align: center; } .top-header .icons-white { fill: #fff; } .top-header { background-color: #333; position: relative; } .top-header .brand-menu { align-items: center; color: #fff; display: inline-flex; margin: 0 -24px; padding: 10px 24px; position: relative; } .top-header :focus { outline: transparent; } .top-header a:hover { color: #222; text-decoration: none !important; } .top-header :focus-visible { outline: 1px solid #fff; outline-offset: -1px; } .top-header .brand-menu:hover { color: #fff; cursor: pointer; text-decoration: none; } .top-header .brand-menu.active { background-color: #474747 } .top-header .brand-menu-items { display: flex; flex-wrap: wrap; justify-content: flex-start; } .top-header .brand-menu-items .brand-menu-item { width: 33.3333%; } .top-header .brand-menu-group .brand-menu-items { display: flex; flex-wrap: wrap; justify-content: flex-start; } .top-header [tabindex]:focus-visible { outline: revert revert revert; } .top-header a:not([href]):not([class]), .top-header a:not([href]):not([class]):hover { color: inherit; text-decoration: none; } .top-header .brand-menu-group .brand-menu-items .brand-menu-item { width: 33.3333%; } .top-header .bs5-overflow-hidden { overflow: hidden !important; } .top-header .bs5-d-block { display: block !important; } .top-header .bs5-d-flex { display: flex !important; } .top-header .bs5-d-none { display: none !important; } .top-header .bs5-po-relative { position: relative !important; } .top-header .bs5-w-100 { width: 100% !important; } .top-header .bs5-justify-content-between { justify-content: space-between !important; } .top-header .bs5-align-items-center { align-items: center !important; } .top-header .bs5-m-0 { margin-bottom: 0 !important; margin-right: 0 !important; margin-top: 0 !important; } .top-header .bs5-mx-auto { margin-left: auto !important; margin-right: auto !important; } .top-header .bs5-ml-1 { margin-left: .5rem !important; } .top-header .bs5-p-3 { padding: 1.5rem !important; } .top-header .bs5-fw-semibold { font-weight: 600 !important; } @media (min-width: 1080px) { .top-header .bs5-col-md-6 { flex: 0 0 auto; width: 50%; } .top-header .brand-menu-group { background-color: #fff; box-shadow: rgba(0, 0, 0, .1) 0 2px 4px; left: 0; max-height: 0; overflow: hidden; position: absolute; top: 100%; transition: max-height .3s ease-in-out; transition-behavior: normal; width: 328px; z-index: 20; } } @media (min-width: 640px) { .top-header .brand-menu-items .brand-menu-item, .top-header .brand-menu-group .brand-menu-items .brand-menu-item { width: 25%; } } @media (min-width: 1080px) { .top-header .brand-menu-items .brand-menu-item, .top-header .brand-menu-group .brand-menu-items .brand-menu-item { width: 33.3333%; } } @media (min-width: 1080px) { .top-header .bs5-d-md-block { display: block !important; } } /* End HEADER */ /* Begin DISCLAIMER */ .disclaimer { width: 100%; max-width:1264px; margin:0 auto; } .disclaimer p { text-align:center; font-size:11px; } .disclaimer a { font-size:11px; color:#80c342 } /* End DISCLAIMER */ /* Begin BANNERS */ .section { display: block; background-repeat: no-repeat; background-position: 50%; background-size: cover; } /* .section--primary { padding-bottom: 2rem; } @media(min-width: 900px) {.section--primary { padding-bottom:70px; } } */ .section.white { background-color: #fff; } .section__body { width: 100%; padding-left: 1.5rem; padding-right: 1.5rem; } .card-list { display: flex; flex: 0 0 auto; flex-wrap: wrap; align-items: stretch; margin-bottom: 0; padding: 0; list-style: none; min-height: 100%; } .card-list--fluid-2-4 .card,.card-list--fluid-2-4 .card-list__item { min-width: auto; } .card-list .card-list__item { margin-bottom: 1.5rem; } .card-list__item { flex-basis: auto; min-height: 100%; min-width: 242px; display: flex; justify-content: center; width: 100%; padding: 0; margin-bottom: 1rem; list-style: none; } .card { position: relative; display: flex; flex-direction: column; flex-wrap: nowrap; align-items: flex-start; justify-content: flex-start; height: 100%; width: 100%; } .card,.card:hover { text-decoration: none; } .image--zoom:hover img { transform: scale(1.2); transition: transform .1s ease-out; } .card__img--wrapper { display: inline-block; overflow: hidden; vertical-align: middle; width: 100%; } .card__img { align-self: center; flex-shrink: 0; /*margin-bottom: 1rem;*/ max-width: 100%; min-width: 100%; transition: transform .2s linear; } .image { display: block; position: relative; overflow: hidden; } .image img { display: block; height: auto; width: 100%; top: 0; } .card__body { flex-grow: 1; display: flex; flex-direction: column; width: 100%; word-break: break-word; } .card__title { width: 100%; } .card__title--article { margin-bottom: 8px; } .card__text { font-size: 1rem; word-break: break-word; margin: 0 0 1rem; } .acer .card__text { color: #474747; } .card__text--b2 { font-size: .813rem; } .card__footer { margin-top: auto; padding: .5rem 0; } .btn:not(:disabled):not(.disabled) { cursor: pointer; } .btn { display: inline-block; font-weight: 600; color: #000; text-align: center; vertical-align: middle; user-select: none; background-color: transparent; border: 2px solid transparent; padding: 9px 24px; font-size: 1rem; line-height: 1.5; border-radius: 0; } .btn:hover { color: #222; text-decoration: none; } .btn.focus,.btn:focus { outline: 0; } .btn.disabled,.btn:disabled { opacity: .65; pointer-events: none; } .btn:not(:disabled):not(.disabled) { cursor: pointer; } .btn--tertiary { color: #474747; border: 0; border-bottom: 2px solid #80c343; padding: 4px 0; min-width: auto; } .btn--tertiary:hover { border-color: #224449; text-decoration: none; } .card-list a { text-decoration: none; } .card-list p { font-size: 1rem; font-weight: 400; line-height: 1.5; margin-top: 0; margin-bottom: 0; } .card-list h6 { color: #222; font-weight: 700; font-size: 1rem; margin-top: 0;} @media(min-width: 1366px) { .section__body { max-width:1414px; margin-left: auto; margin-right: auto; } } @media(max-width: 899.98px) { .card-list--fluid-2-4 .card-list__item { width:calc((100% - 1rem)/2); margin-right: 1rem; } .card-list--fluid-2-4 .card-list__item:nth-child(2n) { margin-right: 0; } } @media(min-width: 640px) { .card-list--fluid-2-4 .card-list__item { width:calc((100% - 3rem)/4); margin-right: 1rem; } .card-list--fluid-2-4 .card-list__item:nth-child(4n) { margin-right: 0; } } @media(min-width: 900px) { .card__text { font-size:1.125rem; } .card__text--b2 { font-size:1rem; } .card-list h6 { font-size:1.25rem; } /*.btn { padding:14px 24px; font-size: 1rem; line-height: 1.5; border-radius: 0; }*/ } /* End BANNERS */ /* Begin FOOTER */ footer { display: block; } .footer p { margin-top: 0; margin-bottom: 1rem; line-height: normal; color: #222;} .footer a { text-decoration: none; color: #222 !important; line-height: 1.2;} .footer a:hover {text-decoration: underline; } .footer a:focus-visible {outline: #333 1px solid; outline-offset: -1px} #backTop { display: inline-block; background-color: #f8f8f8; color: #333; transition: all .3s ease-in-out; font-weight: 600 !important; padding-top: 1rem !important; padding-bottom: 1rem !important; padding: 1rem 1.5rem; border: 1px solid rgba(0,0,0,0); border-radius: 0 !important; text-align: center; text-decoration: none; cursor: pointer; line-height: 1.25; vertical-align: middle; width: 100% !important; } @media (min-width: 1080px) { #backTop:hover {background-color: #e0e0e0; transition: all .3s ease-in-out; } } .footer .bs5-row {display: flex; flex-wrap: wrap; } .footer .bs5-row>* {flex-shrink: 0; width: 100%; max-width: 100%; } .footer .bs5-d-block {display: block !important;} .footer .bs5-mx-auto { margin-right: auto !important; margin-left: auto !important; } .footer .bs5-py-2 {padding-top: 1rem !important; padding-bottom: 1rem !important; } .footer { background-color: #f0f0f0; } .footer-part1 {padding-top: 1.5rem !important; padding-bottom: 1.5rem !important; padding-left: 1.5rem; max-width: 1440px;} .footer-part1, .footer-part2 {width: 100%; margin-right: auto; margin-left: auto;} .footer-part2 > div > div { flex: 0 0 auto; width: 100% } .footer-part1 .bs5-row, .footer-part2 .bs5-row { margin-left: 0 !important; margin-right: 0 !important;} .footer .flex-column { flex-direction: column !important; } .footer-column { position: relative; } .footer-column > p { display: flex !important; justify-content: space-between !important; align-items: center !important; font-weight: 600 !important; margin-bottom: .5rem !important; } .footer-column .flex-column { display: flex; } .footer-column li {list-style: none; padding-top: .5rem !important; padding-bottom: .5rem !important; } .footer-column p, .footer-column a { padding: 12px 24px; margin: 0; color: #222; cursor: pointer;} .footer-column [data-footer-menuItem] { transition: all .3s ease-in-out; height: 0; overflow: hidden; } .footer-column .active {background-color: #e0e0e0;} .footer-links { display: flex; justify-content: center; flex-wrap: wrap; margin-bottom: 1.5rem !important; } .footer-links .footer-links_item { padding: 4px 16px; margin: 0; color: #333; border-right: 2px #e0e0e0 solid; } .footer-links .footer-links_item a { text-decoration: none; } .footer-links .footer-links_item a:hover { text-decoration: none; } .footer-links .footer-links_item:last-child { border-right: none; } .footer-links_color { color: #333; } .footer-media { margin: 1rem -0.75rem; display: flex; justify-content: center; } .footer-media a {display: block; padding: 0 .75rem; } .footer-border {border-top: 2px solid #e0e0e0; } .footer .icons_24 {height: 24px; width: 24px; } .footer .media-icon { width: 24px; height: 24px; fill: #333;} .footer .rotated {transition: all .3s ease-in-out;} .footer .active .rotated {-webkit-transform: rotate(-180deg); transform: rotate(-180deg); transition: all .3s ease-in-out;} .footer .animation_hover { display: inline-block; } .footer .material-icons {font-family: 'Material Icons'; font-weight: normal; font-style: normal; font-size: 24px; line-height: 1; letter-spacing: normal; text-transform: none; display: inline-block; white-space: nowrap; word-wrap: normal; direction: ltr; -webkit-font-feature-settings: 'liga'; -webkit-font-smoothing: antialiased; transition: transform .3s ease-in-out; } .footer .footer-icon {position: absolute; right: 1rem; font-size: 34px; color: #222; } .footer p.active>.material-icons {transform: rotate(180deg); } @media(min-width: 1080px) { .footer-column { display:flex; flex-direction: column; } .footer-column:not(:first-child) { margin-top: 24px; } .footer-column p { padding: 0; cursor: initial; } .footer-column a { margin: 0; padding: 0; } .footer-column [data-footer-menuItem] {display:block; height: auto !important; background-color: rgba(0,0,0,0);} .footer-column .active {background-color:rgba(0,0,0,0);} .footer .footer-icon {display: none;} .footer .bs5-col-md-3 {flex: 0 0 auto; width: 25%;} .footer .bs5-d-md-none {display: none !important } .footer .bs5-py-md-3 { padding-top: 1.5rem !important; padding-bottom: 1.5rem !important; } .footer .media-icon {width:40px; height: 40px;} .footer .animation_hover {display:inline; background-image: linear-gradient(to left, transparent 50%, #333333 50%); background-position: 100% 100%; background-repeat: no-repeat; background-size: 200% 1px; transition: background-position .3s ease-in-out; } .footer .animation_hover:hover {text-decoration: none; background-position: 0 100%; cursor: pointer; } .footer .flex-md-row {flex-direction: row !important } } @media(max-width: 1079.98px) { .footer-column [data-footer-menuItem].second-active { background-color:#fff; max-height: 1500px; } .footer-part1 { padding-left: 0; } .footer-column li { padding-top: 0 !important; padding-bottom: 0 !important; } .footer-column > p { margin-bottom: 0 !important; } } /* Dark Mode CSS */ .darkmode .section.white { background-color: #000; } .darkmode .card-list h6 { color: #fff !important; margin-top: 1rem;} .darkmode .btn--tertiary { color:#fff; border-color: #00aecd; } .darkmode .btn--tertiary:hover { color:#fff; border-color: #11dfc3; } .darkmode #themeHeader { border-bottom: #555 1px solid; } .darkmode #backTop { background-color: #222; color: #f0f0f0; } .darkmode #backTop:hover { background-color: #474747; } .darkmode .footer { background-color: #333; } .darkmode .footer-column .active { background-color: #222 ; } .darkmode .footer-column [data-footer-menuItem].second-active { background-color: #000; } .darkmode .footer p, .darkmode .footer a, .darkmode .footer-icon { color: #ccc !important; } .darkmode .footer-border { border-top: #CCC !important; } .darkmode .footer a:hover { text-decoration: underline !important; } .darkmode .footer-part2 { border-top: #555 1px solid; } /* End FOOTER */

Marques Acer

Réponses Acer Security & Vulnerabilities

Firmware BMC vulnérable des serveurs d'entreprise

LES DÉTAILS DE LA VULNÉRABILITÉ :

Les chercheurs ont identifié une vulnérabilité au niveau des contrôleurs Vertiv BMC (Baseboard Management controllers) qui peut provoquer le piratage du serveur pour exécuter toute attaque de code.

L'une des vulnérabilités est que le micrologiciel BMC n'effectue pas de vérification de signature cryptographique avant de recevoir les mises à jour et d'écrire dans la mémoire flash SPI.

La deuxième vulnérabilité est que la mise à jour du firmware a une vulnérabilité d'injection d'instructions.

Ces deux vulnérabilités permettent à un attaquant d'utiliser les privilèges de l'administrateur hôte pour exécuter du code arbitraire sur le firmware et apporter des modifications permanentes au contenu de la mémoire flash SPI du BMC. L'attaquant peut également modifier l'environnement BMC pour empêcher de futures mises à jour du firmware par le biais du mécanisme logiciel, de sorte que le BMC puisse être définitivement détruit.

Portée de l'impact :

Acer Serveurs Altos avec BMCs ASPEED AST2300 / AST2400 / AST2500 avec firmware Vertiv Avocent MergePoint EMS.

Résolution :

Acer travaille en étroite collaboration avec les fournisseurs pour remédier à certaines vulnérabilités du micrologiciel du contrôleur de gestion de la carte de base (BMC) qui touchent certains de ses produits de serveurs Altos. Nous recommandons aux clients de limiter tous risques en suivant les meilleures pratiques de sécurité courantes, en limitant l'accès privilégié aux administrateurs de confiance et en appliquant les dernières mises à jour du firmware BMC dès qu'elles sont disponibles. Les liens vers ces mises à jour seront affichés ci-dessous dès qu'ils seront disponibles.

Modèles touchés Acer:

Altos T310 F3

BMC Firmware - v1.41

AR460 F3

BMC Firmware - v8.86

AR480 F3

BMC Firmware - v8.86

Altos W2050-W270h F4