Jan. 16, 2023, 2:10 a.m. | Zitai Chen, David Oswald

cs.CR updates on arXiv.org arxiv.org

Apart from the actual CPU, modern server motherboards contain other auxiliary
components, for example voltage regulators for power management. Those are
connected to the CPU and the separate Baseboard Management Controller (BMC) via
the I2C-based PMBus.


In this paper, using the case study of the widely used Supermicro X11SSL
motherboard, we show how remotely exploitable software weaknesses in the BMC
(or other processors with PMBus access) can be used to access the PMBus and
then perform hardware-based fault injection attacks …

access baseboard management controller bmc bricking case cpu cpus management motherboard power processors regulators server software study supermicro

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC