Over 24,650 Internet-Exposed BMCs Leak IPMI Password Hashes
Researchers found that 24,650 baseboard management controllers (BMCs) are accessible online and reveal IPMI password hashes before any login is required. Attackers could potentially crack these hashes to gain unauthorized remote control of servers. This widespread exposure poses a serious risk to the security of critical infrastructure and data centers globally.