[Info-vax] RX2800 i4 iLO 3 firmware

Craig A. Berry craigberry at nospam.mac.com
Thu Jun 24 17:36:22 EDT 2021


Because of this...

On 6/23/21 11:58 AM, Stephen Hoffman wrote:
> iLO 2 and iLO 2 are hardware limited and which reportedly constrains 
> what is possible with the hardware, and are nowadays best kept isolated. 
> There are exploits against these, including the CVE-2013-4786 
> vulnerability.

Aren't we pretty much back to this:

On 6/23/21 3:15 PM, Stephen Hoffman wrote:
 >
 > An external, outboard, out-of-the-server-cabinet management console was
 > never anybody's preferred solution though, which is why it's all but
 > disappeared as a viable design for most modern servers; why it all went
 > embedded.

?

For example, if I want to be able to access an rx2660 console on the
network without setting off alarm bells during periodic penetration
testing, don't I need an "outboard" device behind which I can hide it?



More information about the Info-vax mailing list