Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

Thousands of Exposed Server BMCs Leak IPMI Hashes Before Login

Part of the BMCs story · since 28 Jul

Quiet for 12 weekslast report 5 Aug5 articles5 outlets
28 Jul · The Hacker News first30 Sep16 OctNowThis article1st of 5
  • Tue 28 Jul, 15:49 UTC. The Hacker News, first report. Thousands of Exposed Server BMCs Leak IPMI Hashes Before Login. This article, 1st of 5.
  • Tue 28 Jul, 21:41 UTC. Dark Reading, its first report on the story. 24,000+ BMCs exposed by 20 year old CVE-2013-4786 flaw.
  • Mon 3 Aug, 15:21 UTC. SecurityOnline, its first report on the story. BMCs Leak Password Hashes via CVE-2013-4786, Threatening Cloud AI.
  • Tue 4 Aug, 10:09 UTC. SecurityWeek, its first report on the story. CVE-2013-4786 flaw puts thousands of servers at risk.
  • Wed 5 Aug, 23:21 UTC. Ars Technica, its first report on the story. Thousands of servers can be backdoored by exploiting buggy motherboard controllers.

The article highlights a critical cybersecurity vulnerability involving 24,650 Internet-exposed Baseboard Management Controllers (BMCs) that are disclosing IPMI password hashes prior to user login. This exposure poses significant risks to server security, allowing potential attackers to gain unauthorized access to sensitive systems. Recommendations for mitigating this vulnerability include implementing stronger access controls and regularly monitoring BMC configurations to prevent exploitation.

How the story developed

All 5 articles
Quiet for 12 weekslast report 5 Aug5 articles5 outlets

5 articles from 5 outlets since 28 Jul. Quiet since 5 Aug. This was the first report.

Now28 Jul3031234567First reportThe Hacker News · 28 Jul, 15:49Picked up againafter 6 days quiet
  • Tue 28 Jul, 15:49 UTC. The Hacker News, first report. Thousands of Exposed Server BMCs Leak IPMI Hashes Before Login. This article, 1st of 5.
  • Tue 28 Jul, 21:41 UTC. Dark Reading, its first report on the story. 24,000+ BMCs exposed by 20 year old CVE-2013-4786 flaw.
  • Mon 3 Aug, 15:21 UTC. SecurityOnline, its first report on the story. BMCs Leak Password Hashes via CVE-2013-4786, Threatening Cloud AI.
  • Tue 4 Aug, 10:09 UTC. SecurityWeek, its first report on the story. CVE-2013-4786 flaw puts thousands of servers at risk.
  • Wed 5 Aug, 23:21 UTC. Ars Technica, its first report on the story. Thousands of servers can be backdoored by exploiting buggy motherboard controllers.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Tue 28 JulDay 02
    1. Thousands of Exposed Server BMCs Leak IPMI Hashes Before Login15:49 · The Hacker News · First report · This article, 1st of 5
    2. 24,000+ BMCs exposed by 20 year old CVE-2013-4786 flaw21:41 · Dark Reading

  2. Quiet for 6 days

    Mon 3 AugDay 61
    1. BMCs Leak Password Hashes via CVE-2013-4786, Threatening Cloud AI15:21 · SecurityOnline · Picked up again
  3. Tue 4 AugDay 71
    1. CVE-2013-4786 flaw puts thousands of servers at risk10:09 · SecurityWeek

  4. Quiet for 2 days

    Wed 5 AugDay 81
    1. Thousands of servers can be backdoored by exploiting buggy motherboard controllers23:21 · Ars Technica

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in