Metal-as-a-Disservice: Exploiting Legacy Flaws in Cutting Edge Clouds
Demonstrates cross-tenant attacks and persistent firmware backdooring in major bare-metal cloud providers by exploiting legacy Baseboard Management Controllers.
Summary
Bare-Metal Cloud Architecture and Multi-Tenancy
Cloud providers offer bare-metal server instances granting customers dedicated access to physical server hardware. However, ensuring clean isolation between successive tenants requires complete hardware sanitization.
Baseboard Management Controller (BMC) Vulnerabilities
Bill Demirkapi reveals critical firmware vulnerabilities in legacy BMC implementations (such as IPMI and proprietary management chips) that survive standard tenant de-provisioning workflows.
Cross-Tenant Persistence and Hypervisor Compromise
Attackers who rent bare-metal instances can flash malicious BMC firmware implants that persist across customer re-provisioning, granting unauthorized access to the next tenant’s memory, hypervisor, and data.
Securing Cloud Bare-Metal Provisioning
Hardening bare-metal clouds requires cloud operators to enforce cryptographic hardware root of trust, physically re-flash all microcontroller firmware between rentals, and isolate BMC networks.
Related talks
Main Stage·44 min
Enrique Nissim · Krzysztof Okupski
Enrique Nissim and Krzysztof Okupski disclose AMDSinkclose, a vulnerability allowing Ring -2 execution and System Management Mode takeover across millions of AMD processors.
Main Stage·46 min
Alex Tereshkin · Adam Zabrocki
NVIDIA offensive researchers detail chaining a dozen vulnerabilities in AMI MegaRAC BMCs, demonstrating remote exploitation to flash persistent implants into server SPI flash.
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.