An European researcher says that even though HP has released patches for a vulnerability in the server management solution that is used to gain remote access to baseboard management controllers — which have been embedded in most HP servers for the last decade — users who want to patch may have problems locating the fixes on HP's website.