AMI MegaRAC: User enumeration — lets an attacker map valid BMC accounts before credential attack

Impact

User enumeration — lets an attacker map valid BMC accounts before credential attack

Who can reach it

Network

What to do

BMC firmware update; low individual severity but it is the reconnaissance step for the rest of the MegaRAC chain

References