Database/Firmware, BMC & network fabric
Serial console servers / out-of-band access appliances: Console servers (Opengear, Lantronix, Digi and similar) hold
UnscoredNCVD-0000-011-serial-console-servers-out-of-baFirmware, BMC & network fabriccurated
Impact
Console servers (Opengear, Lantronix, Digi and similar) hold plaintext-equivalent access to every device's console including switches and BMCs, run long-lived embedded Linux, and are the deliberate bypass path around all network segmentation
Who can reach it
Network / OOB LAN
What to do
Bring the console-server fleet into the same patch and credential-rotation cadence as the compute; require per-device authentication rather than a shared console password. Frequently owned by the facility, not the operator
References
Related entries
- ATA Secure Erase / NVMe Sanitize / Format NVM across SSD vendorsNCVD-2011-001-ata-secure-erase-nvme-sanitize-f · ATA Secure Erase / NVMe Sanitize / Format NVM across SSD vendors - drives that report sanitization success while…Unscored
- ATA Secure Erase / NVMe Sanitize / Format NVM across SSD vendorsNCVD-2011-002-ata-secure-erase-nvme-sanitize-f · ATA Secure Erase / NVMe Sanitize / Format NVM across SSD vendors - drives that report sanitization success while…Unscored
- HDD and SSD controller firmware as a persistence surfaceNCVD-2015-001-hdd-and-ssd-controller-firmware · HDD and SSD controller firmware as a persistence surface - demonstrated against Seagate, Western Digital, Toshiba…Unscored
- HDD and SSD controller firmware as a persistence surfaceNCVD-2015-002-hdd-and-ssd-controller-firmware · HDD and SSD controller firmware as a persistence surface - demonstrated against Seagate, Western Digital, Toshiba…Unscored
- AMD SEV memory encryption - host-controlled guest physical to host physical mapping: The original demonstrationNCVD-2018-001-amd-sev-memory-encryption-host-c · AMD SEV memory encryption - host-controlled guest physical to host physical mappingUnscored
- Microsoft BitLocker / Windows eDrive hardware-encryption offload on any TCG Opal or IEEE-1667 self-encrypting driveNCVD-2018-004-microsoft-bitlocker-windows-edri · Microsoft BitLocker / Windows eDrive hardware-encryption offload on any TCG Opal or IEEE-1667 self-encrypting driveUnscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.