24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Exposed management interfaces leave tens of thousands of servers vulnerable to remote authentication cracking.
Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform Management Interface (IPMI) protocol to the public internet. Of the 36,872 internet-exposed server-management i...
The Hacker News
Source
Generated insight by OnAirToday AI
The exposure of IPMI password hashes facilitates offline brute-force attacks, granting adversaries potential remote control over physical server infrastructure. This vulnerability highlights the critical danger of leaving management interfaces accessible without rigorous network segmentation or secure gateway layers.
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.