PMFault: Voltage Fault Injection on Server Platforms Through the PMBus

Hardware-based attacks like voltage glitching have been a threat to embedded processors like smartcards for decades. More recently, attacks like Clkscrew, Plundervolt, VoltJockey, and V0ltPwn, have shown that desktop and server processors are equally vulnerable to voltage fault injection. Controlling the built-in power management features from software, those attacks break the security guarantees of trusted execution environments like Intel SGX or ARM TrustZone.

In this talk, we look at a related, yet so-far overlooked attack surface - the PMBus - …

attacks desktop embedded equally features from software hardware injection management platforms plundervolt power power management processors server software threat voltage vulnerable