Thousands of Exposed Server BMCs Leak IPMI Hashes Before Login

THE article highlights a critical cybersecurity vulnerability involving 24,650 Internet-exposed Baseboard Management Controllers (BMCs) that are disclosing IPMI password hashes prior to user login. This exposure poses significant risks to server security, allowing potential attackers to gain unauthorized access to sensitive systems. Recommendations for mitigating this vulnerability include implementing stronger access controls and regularly monitoring BMC configurations to prevent exploitation.