CRITICAL AMI MEGARAC BUG CAN LET ATTACKERS HIJACK AND BRICK SERVERS

Summary from the TLDR InfoSec newsletter

MegaRAC BMC software enables remote server management, allowing admins to troubleshoot as if present. Eclypsium researchers identified a CVSS 10 vulnerability permitting remote, unauthenticated attackers to control affected servers. AMI, the software's developer, has issued patches to OEM manufacturers for customer rollout.