Hi All
A fascinating piece of work with demonstration proving it works, and you can do it remotely.....
Due to flaws in the design of Supermicro 11th generation motherboards, we can gain access to the PMBus through multiple paths: 1) via an I2C connection from the OS running on CPU, or 2) vulnerabilities found in another micro-controller called the Baseboard Management Controller (BMC), which often exists on server motherboards. With the revived undervolting attack, we demonstrate that fault injection into SGX enclaves can be carried out remotely via software again . Moreover, we discovered an overvolting attack that can permanently brick the server CPU.
https://zt-chen.github.io/PMFault/
Learn and make sure you put in the appropriate controls.
Regards
Caute_Cautim
