Companies that are impacted by this vulnerability should implement the patch as soon as possible. Firmware-level vulnerabilities are especially lucrative due to the level of access and persistence they provide an attacker. Further, check for Indicators of Compromise (IOC) on affected systems, such as strange or unauthorized external connections, recent undocumented firmware changes or updates, or even an uptick in logged errors.

This vulnerability highlights the importance of keeping up to date on firmware updates and understanding which devices are on company networks. Include firmware in vulnerability scans and device firmware versions in asset management. Also, ensure vendors are keeping their software and firmware up to date, and independently validate remediation of vulnerabilities.

Firmware updates can be particularly sensitive to issues, so a strong change control procedure with a backout plan and vendor support is highly encouraged.

https://thehackernews.com/2022/05/critical-pantsdown-bmc-vulnerability.html