Good news! We've wrapped our initial "Lights Out" research into out-of-band management devices and BMCs. The final advisories are live and OOBscan now includes detections for all issues. The bad news: many of these issues still have no patch (OpenBMC and derivatives) and many EoL devices are forever-exploitable (HPE iLO 4 and below). TL;DR: Turn off IPMI and place BMCs into per-device VLANs if possible.

https://github.com/runZeroInc/oobscan#research-and-disclosures