OA Module Compromised (96 Views)
Reply
Valued Contributor
sgunelius
Posts: 163
Registered: ‎11-03-2005
Message 1 of 2 (96 Views)

OA Module Compromised

Our security team discovered a Standby OA Module making NTP connection attempts to IP addresses (registered in South Africa) not defined in our configuration.  We were running v3.71 firmware which I've since upgraded to v4.01 in response to this.  I opened a support call with HP (getting more and more frustrated with them after 15 years of good service) and was told that from what they could see the OA module was functioning properly.  Even though I explained it was their hardware, firmware and software, that I had made no customizations that would've resulted in this issue, they stuck to the script.  I ended up opening a ticket online and calling our HP rep to have this kicked upstairs.  I also reported this through their website as a possible vulnerability.

 

Has anyone seen anything similar with the OA module and/or the 3.71 firmware?  Thanks.

 

Scott

Please use plain text.
Acclaimed Contributor
Torsten.
Posts: 23,103
Registered: ‎10-02-2001
Message 2 of 2 (79 Views)

Re: OA Module Compromised

Could it be another component (ILO, interconnect) is asking for this NTP server via the OA network? Check the settings.


Hope this helps!
Regards
Torsten.

__________________________________________________

There are only 10 types of people in the world -
those who understand binary, and those who don't.

__________________________________________________

No support by private messages. Please ask the forum!

If you feel this was helpful please click the KUDOS! star in the left column!   
Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation