Get Permission
Supermicro and Pulse Secure have each issued advisories this past week warning users that some of their products are vulnerable to the updated version of Trickbot malware that features a bootkit module, nicknamed Trickboot, which can search for UEFI/BIOS firmware vulnerabilities.
Server maker Supermicro confirmed that its X10UP "Denlow" series of motherboards has vulnerabilities that can be detected by Trickboot. Secure access gateway manufacturer PulseSecure notes that two of its Pulse Secure Appliance models can be exploited.
"Supermicro is aware of the Trickboot issue which is observed only with a subset of the X10 UP motherboards," the company says, adding it will be providing a patch. It did not, however, offer a time frame for when the patch would be issued.