Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks

Over 24,000 internet-accessible baseboard management controller (BMC) server-management interfaces disclose authentication hashes before login, stemming from a vulnerability that has existed for decades.

Exposed hashes could be cracked offline to gain administrative access to affected servers. Organizations should confirm BMC/IPMI interfaces are not internet-facing and apply available firmware mitigations.