Simpler Navigation for Servers and Operating Systems
Completed: a much simpler Servers and Operating Systems section of the Community. We combined many of the older boards, so you won't have to click through so many levels to get at the information you need. Check the consolidated boards here as many sub-forums are now single boards.
BladeSystem Management Software
Showing results for 
Search instead for 
Did you mean: 

OA Module Compromised

Valued Contributor

OA Module Compromised

Our security team discovered a Standby OA Module making NTP connection attempts to IP addresses (registered in South Africa) not defined in our configuration.  We were running v3.71 firmware which I've since upgraded to v4.01 in response to this.  I opened a support call with HP (getting more and more frustrated with them after 15 years of good service) and was told that from what they could see the OA module was functioning properly.  Even though I explained it was their hardware, firmware and software, that I had made no customizations that would've resulted in this issue, they stuck to the script.  I ended up opening a ticket online and calling our HP rep to have this kicked upstairs.  I also reported this through their website as a possible vulnerability.


Has anyone seen anything similar with the OA module and/or the 3.71 firmware?  Thanks.



Acclaimed Contributor

Re: OA Module Compromised

Could it be another component (ILO, interconnect) is asking for this NTP server via the OA network? Check the settings.

Hope this helps!

There are only 10 types of people in the world -
those who understand binary, and those who don't.

No support by private messages. Please ask the forum!

If you feel this was helpful please click the KUDOS! thumb below!