<style> * { padding: 0; margin: 0; } *, :after, :before { box-sizing: border-box; } .nav-global { background-color: #f0f0f0; display: none; padding: 0 1rem; } ul { display: flex; font-size: .8125rem; margin: 0; padding: 0; height: 100%; } li { list-style: none; position: relative; margin: 0 .75rem; } li:first-child { margin-left: 0; } li:last-child { margin-right: 0; } li a { display: flex; align-items: center; padding: 1rem 0; text-decoration: none; color: #474747; } li a:hover:after, li:hover>a:after { content: ""; border-bottom: 3px solid #80c343; position: absolute; left: 0; bottom: 0; min-width: 100%; z-index: 1; } @media (min-width: 900px) { .nav-global { display: flex; justify-content: space-between; align-items: center; } ul { font-size: .875rem; } } <style> @font-face {font-family: 'Material Icons'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2'); } .material-icons {font-family: 'Material Icons'; font-weight: normal; font-style: normal; font-size: 24px; line-height: 1; letter-spacing: normal; text-transform: none; display: inline-block; white-space: nowrap; word-wrap: normal; direction: ltr; -webkit-font-feature-settings: 'liga'; -webkit-font-smoothing: antialiased; } .footer *,:after,:before {box-sizing: border-box} footer,nav,section {display: block } .footer {font-size: 16px; scroll-behavior: smooth; margin: 0; font-family: 'Noto Sans',sans-serif; font-weight: 400; line-height: 1.5; -webkit-text-size-adjust: 100%; -webkit-tap-highlight-color: rgba(0,0,0,0); -ms-text-size-adjust: 100%; -ms-overflow-style: scrollbar;} .footer ol, .footer ul {padding-left: 2rem; margin-top: 0; margin-bottom: 1rem } .footer img {vertical-align: middle } .footer p {font-size: 1rem; font-weight: 400; line-height: 1.5; margin-top: 0; margin-bottom: 1rem } .footer a {text-decoration: none; color: #222; font-size: inherit; font-weight: inherit;} .footer a:hover {text-decoration: underline;color: inherit;} .footer-nav {display: flex; flex-wrap: wrap; width: 100%; background-color: #fafafa; } .footer-nav__section {flex: 1 1 25% } p.footer-nav__title {font-size: 1rem; font-weight: 600; margin: 0; position: relative } .footer-nav__caret {position: absolute; right: 1rem; font-size: 34px; color: #80c343 } ul.footer-nav__list {margin: 0; padding: 0; height: 0; visibility: hidden; transition: transform .1s ease-in-out; transform: scaleY(0); transform-origin: top } .is-open ul.footer-nav__list {visibility: visible; transform: scaleY(1); height: auto; transition: transform .3s ease-in-out } .footer-nav__item .footer-nav__link {padding-left: 0 } .footer-nav__item:last-child .footer-nav__link {border: 0 } .footer-nav__link {display: block; padding: 1.5rem 1rem } .footer-nav__link:hover {text-decoration: none } .is-open .footer-nav__link>.material-icons {transform: rotate(180deg) } ul.footer-nav__list li {font-size: .875rem; list-style: none; padding: 0 26px } ul.footer-nav__list li a {display: block; padding: 1.5rem 1rem; font-size: .875rem; color: #222; } ul.footer-nav__list li a:hover {text-decoration: none } ul.footer-nav__list li:last-child a {border: 0 } .is-open ul.footer-nav__list li a > .material-icons {transform: rotate(180deg) } .footer-bottom {display: flex; flex-wrap: wrap; justify-content: center; padding: 2rem 1.5rem; background-color: #1a1a1a; color: #fafafa } .footer-bottom .nav-legal {width: 100%; text-align: center } .footer-bottom .nav-legal .menu--legal {display: block; margin: 0 0 1rem; padding: 0; width: 100% } .footer-bottom .nav-legal .menu--legal li {display: inline-flex; font-size: .8125rem; border-right: 1px solid #89898b; padding: 0 .5rem } .footer-bottom .nav-legal .menu--legal li:last-child {border: 0; padding-right: 0;} .footer-bottom .nav-legal .menu--legal li:first-child {padding-left: 0;} .footer-bottom .nav-legal .menu--legal a {padding: 1px; color: #fafafa;} .footer-bottom .nav-legal .menu--legal a:hover {color: #fff;} .footer-bottom .social {display: flex; width: 100%; justify-content: center } .footer-bottom .social .social__list {list-style: none; padding: 0; margin: 0; display: inline-flex; flex-direction: row; flex-wrap: wrap; justify-content: flex-start; max-width: 260px } .footer-bottom .social li {background-color: #474747; border-radius: 9999px; height: 34px; width: 34px; display: flex; flex-direction: column; align-items: center; justify-content: center; margin: 0 15px 30px } .footer-bottom .social li a {display: block; color: #fff; display: flex; flex-direction: column; align-items: center; justify-content: center } .footer-bottom .social li a:hover {color: #80c343; text-decoration: none } .footer-bottom .locale {display: flex; justify-content: center; align-items: center; width: 100% } .footer-bottom .locale .material-icons {color: #767676; margin-right: .5rem; font-size: 1.125rem } .footer-bottom .locale:hover .material-icons {text-decoration: none } .footer-bottom .locale .locale__text {font-size: .8125rem; color: #fafafa } .footer-bottom .copyright {font-size: 10px; color: grey; text-align: center; width: 100% } .footer-bottom .copyright p {font-size: .625rem; color: #fff } @media(min-width: 640px) { .footer-bottom .social .social__list {max-width:100% } } @media(min-width: 900px) { .footer-nav {flex-direction:row; flex-wrap: nowrap; justify-content: space-between; padding: 3rem 1.5rem } p.footer-nav__title {font-size:1.25rem; } p.footer-nav__title a {cursor: text;} .footer-nav__item {border:0; padding: 0 } .footer-nav__link {padding:.2rem 0 } .footer-nav__link:hover {text-decoration:underline } ul.footer-nav__list {height:100%; visibility: visible; transform: scaleY(1) } ul.footer-nav__list li {border:0; padding: 0; font-size:.875rem; } ul.footer-nav__list li a {padding:.2rem 0; } ul.footer-nav__list li a:hover {text-decoration:underline; } .footer-nav__caret {display: none; } .footer-bottom .nav-legal {width:50%; text-align: left } .footer-bottom .nav-legal .menu--legal li {font-size:.875rem } .footer-bottom .social {width:50%; justify-content: flex-end } .footer-bottom .social li {margin:0 6px 15px } .footer-bottom .locale {width:50%; justify-content: flex-end } .footer-bottom .locale .locale__text {font-size:.875rem } .footer-bottom .copyright {width:50%; text-align: left } .footer-bottom .copyright p {font-size:.75rem } } @media(max-width: 899px) { .footer-nav__section {flex: 1 1 100%; border-bottom: 1px solid #c9c9c9 } .footer-nav__section:last-child {border: 0;} .footer-nav__link {border-bottom: 1px solid #c9c9c9;} p.footer-nav__title {font-size: 1rem; font-weight: 600; } } <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KR777P" height="0" width="0" style="display:none;visibility:hidden"></iframe>

Respostas da Acer Security & Vulnerabilities

Firmware BMC vulnerável de servidores Enterprise

DETALHES DE VULNERABILIDADE:

Pesquisadores identificaram uma vulerabilidade com Vertiv BMC (Baseboard Management Controllers) que pode fazer com que o servidor seja hackeado para executar qualquer ataque de código.

Uma vulnerabilidade é que o firmware da BMC não realiza verificação de assinatura criptográfica antes de receber atualizações e gravar na memória flash SPI.

A segunda vulnerabilidade é que a atualização do firmware tem uma vulnerabilidade de injeção de instrução.

Ambas as vulnerabilidades permitem que uma outra pessoa use os privilégios de administrador do host para executar códigos arbitrários no firmware e fazer alterações permanentes no conteúdo da memória flash SPI na BMC. O atacante também pode alterar o ambiente da BMC para evitar futuras atualizações de firmware através do mecanismo de software, para que a BMC possa ser permanentemente destruída.

Âmbito de aplicação do impacto:

Acer Servidores Altos com ASPEED AST2300 / AST2400 / AST2500 BMCs com firmware Vertiv Avocent MergePoint EMS.

Resolução:

Acer está trabalhando de perto com fornecedores para resolver certas vulnerabilidades de firmware do controlador de gerenciamento de rodapé (BMC) que afetam alguns de seus produtos de servidor Altos. Recomendamos que os clientes limitem seus riscos seguindo as práticas recomendadas de segurança comuns, restringindo o acesso privilegiado a administradores confiáveis e aplicando as atualizações de firmware mais recentes da BMC assim que estiverem disponíveis. Os links para essas atualizações serão postados abaixo quando estiverem disponíveis.

Modelos afetados Acer:

Altos T310 F3

BMC Firmware - v1.41

AR460 F3

BMC Firmware - v8.86

AR480 F3

BMC Firmware - v8.86

Altos W2050-W270h F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

CMC Firmware - v1.34

Altos R480 F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

Altos W2200-W670h F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

CMC Firmware - v1.34

Altos R369 F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

Altos R389 F4

BMC Firmware - v1.91 (only for Vertiv BMC Firmware)

Mais informações

Para mais informações, visite https://eclypsium.com/wp-content/uploads/2019/07/Vulnerable-Firmware-in-the-Supply-Chain.pdf

Declaração de exoneração de responsabilidade

AS INFORMAÇÕES ACIMA SÃO FORNECIDAS "COMO ESTÃO" EM RELAÇÃO AOS PRODUTOS ACER E INTEL®. O USO DAS INFORMAÇÕES OU MATERIAIS LIGADOS A ESTA PÁGINA É POR SUA CONTA E RISCO. ACER RESERVA-SE O DIREITO DE ALTERAR OU ATUALIZAR ESTA PÁGINA A QUALQUER MOMENTO.

<style> * { padding: 0; margin: 0; } *, :after, :before { box-sizing: border-box; } .nav-global { background-color: #f0f0f0; display: none; padding: 0 1rem; } ul { display: flex; font-size: .8125rem; margin: 0; padding: 0; height: 100%; } li { list-style: none; position: relative; margin: 0 .75rem; } li:first-child { margin-left: 0; } li:last-child { margin-right: 0; } li a { display: flex; align-items: center; padding: 1rem 0; text-decoration: none; color: #474747; } li a:hover:after, li:hover>a:after { content: ""; border-bottom: 3px solid #80c343; position: absolute; left: 0; bottom: 0; min-width: 100%; z-index: 1; } @media (min-width: 900px) { .nav-global { display: flex; justify-content: space-between; align-items: center; } ul { font-size: .875rem; } } <style> @font-face {font-family: 'Material Icons'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2'); } .material-icons {font-family: 'Material Icons'; font-weight: normal; font-style: normal; font-size: 24px; line-height: 1; letter-spacing: normal; text-transform: none; display: inline-block; white-space: nowrap; word-wrap: normal; direction: ltr; -webkit-font-feature-settings: 'liga'; -webkit-font-smoothing: antialiased; } .footer *,:after,:before {box-sizing: border-box} footer,nav,section {display: block } .footer {font-size: 16px; scroll-behavior: smooth; margin: 0; font-family: 'Noto Sans',sans-serif; font-weight: 400; line-height: 1.5; -webkit-text-size-adjust: 100%; -webkit-tap-highlight-color: rgba(0,0,0,0); -ms-text-size-adjust: 100%; -ms-overflow-style: scrollbar;} .footer ol, .footer ul {padding-left: 2rem; margin-top: 0; margin-bottom: 1rem } .footer img {vertical-align: middle } .footer p {font-size: 1rem; font-weight: 400; line-height: 1.5; margin-top: 0; margin-bottom: 1rem } .footer a {text-decoration: none; color: #222; font-size: inherit; font-weight: inherit;} .footer a:hover {text-decoration: underline;color: inherit;} .footer-nav {display: flex; flex-wrap: wrap; width: 100%; background-color: #fafafa; } .footer-nav__section {flex: 1 1 25% } p.footer-nav__title {font-size: 1rem; font-weight: 600; margin: 0; position: relative } .footer-nav__caret {position: absolute; right: 1rem; font-size: 34px; color: #80c343 } ul.footer-nav__list {margin: 0; padding: 0; height: 0; visibility: hidden; transition: transform .1s ease-in-out; transform: scaleY(0); transform-origin: top } .is-open ul.footer-nav__list {visibility: visible; transform: scaleY(1); height: auto; transition: transform .3s ease-in-out } .footer-nav__item .footer-nav__link {padding-left: 0 } .footer-nav__item:last-child .footer-nav__link {border: 0 } .footer-nav__link {display: block; padding: 1.5rem 1rem } .footer-nav__link:hover {text-decoration: none } .is-open .footer-nav__link>.material-icons {transform: rotate(180deg) } ul.footer-nav__list li {font-size: .875rem; list-style: none; padding: 0 26px } ul.footer-nav__list li a {display: block; padding: 1.5rem 1rem; font-size: .875rem; color: #222; } ul.footer-nav__list li a:hover {text-decoration: none } ul.footer-nav__list li:last-child a {border: 0 } .is-open ul.footer-nav__list li a > .material-icons {transform: rotate(180deg) } .footer-bottom {display: flex; flex-wrap: wrap; justify-content: center; padding: 2rem 1.5rem; background-color: #1a1a1a; color: #fafafa } .footer-bottom .nav-legal {width: 100%; text-align: center } .footer-bottom .nav-legal .menu--legal {display: block; margin: 0 0 1rem; padding: 0; width: 100% } .footer-bottom .nav-legal .menu--legal li {display: inline-flex; font-size: .8125rem; border-right: 1px solid #89898b; padding: 0 .5rem } .footer-bottom .nav-legal .menu--legal li:last-child {border: 0; padding-right: 0;} .footer-bottom .nav-legal .menu--legal li:first-child {padding-left: 0;} .footer-bottom .nav-legal .menu--legal a {padding: 1px; color: #fafafa;} .footer-bottom .nav-legal .menu--legal a:hover {color: #fff;} .footer-bottom .social {display: flex; width: 100%; justify-content: center } .footer-bottom .social .social__list {list-style: none; padding: 0; margin: 0; display: inline-flex; flex-direction: row; flex-wrap: wrap; justify-content: flex-start; max-width: 260px } .footer-bottom .social li {background-color: #474747; border-radius: 9999px; height: 34px; width: 34px; display: flex; flex-direction: column; align-items: center; justify-content: center; margin: 0 15px 30px } .footer-bottom .social li a {display: block; color: #fff; display: flex; flex-direction: column; align-items: center; justify-content: center } .footer-bottom .social li a:hover {color: #80c343; text-decoration: none } .footer-bottom .locale {display: flex; justify-content: center; align-items: center; width: 100% } .footer-bottom .locale .material-icons {color: #767676; margin-right: .5rem; font-size: 1.125rem } .footer-bottom .locale:hover .material-icons {text-decoration: none } .footer-bottom .locale .locale__text {font-size: .8125rem; color: #fafafa } .footer-bottom .copyright {font-size: 10px; color: grey; text-align: center; width: 100% } .footer-bottom .copyright p {font-size: .625rem; color: #fff } @media(min-width: 640px) { .footer-bottom .social .social__list {max-width:100% } } @media(min-width: 900px) { .footer-nav {flex-direction:row; flex-wrap: nowrap; justify-content: space-between; padding: 3rem 1.5rem } p.footer-nav__title {font-size:1.25rem; } p.footer-nav__title a {cursor: text;} .footer-nav__item {border:0; padding: 0 } .footer-nav__link {padding:.2rem 0 } .footer-nav__link:hover {text-decoration:underline } ul.footer-nav__list {height:100%; visibility: visible; transform: scaleY(1) } ul.footer-nav__list li {border:0; padding: 0; font-size:.875rem; } ul.footer-nav__list li a {padding:.2rem 0; } ul.footer-nav__list li a:hover {text-decoration:underline; } .footer-nav__caret {display: none; } .footer-bottom .nav-legal {width:50%; text-align: left } .footer-bottom .nav-legal .menu--legal li {font-size:.875rem } .footer-bottom .social {width:50%; justify-content: flex-end } .footer-bottom .social li {margin:0 6px 15px } .footer-bottom .locale {width:50%; justify-content: flex-end } .footer-bottom .locale .locale__text {font-size:.875rem } .footer-bottom .copyright {width:50%; text-align: left } .footer-bottom .copyright p {font-size:.75rem } } @media(max-width: 899px) { .footer-nav__section {flex: 1 1 100%; border-bottom: 1px solid #c9c9c9 } .footer-nav__section:last-child {border: 0;} .footer-nav__link {border-bottom: 1px solid #c9c9c9;} p.footer-nav__title {font-size: 1rem; font-weight: 600; } }