Database/Firmware, BMC & network fabric
KVM-over-IP / virtual media: The BMC's virtual-media function can mount an arbitrary ISO as the host's boot device
NCVD-0000-010-kvm-over-ip-virtual-mediaFirmware, BMC & network fabriccurated
Impact
The BMC's virtual-media function can mount an arbitrary ISO as the host's boot device. Any BMC compromise therefore converts directly into arbitrary host boot, bypassing disk encryption and OS controls (CVE-2019-16649 is the concrete instance)
Who can reach it
Network / BMC
What to do
Disable virtual media in the BMC baseline except during provisioning windows, and gate the KVM/vmedia ports at the management-network edge. Costs the remote-hands workflow that most operations teams rely on
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.