Security researchers at Nozomi Networks, a California firm devoted to industrial cyber security, have found 13 vulnerabilities in the firmware of baseboard management controllers on an expansion card made by a Taiwan-based company.