CVE-2013-4786 Exposes 24K+ Internet-Facing BMCs, Enabling Mass Offline Password Cracking
LavaHQ scanned UDP port 623 and identified 36,872 internet‑exposed IPMI interfaces. A flaw (CVE‑2013‑4786) caused 24,650 of them to reveal password‑derived HMAC‑SHA1 hashes, making bulk offline cracking trivial; dozens of weak, factory defaults were recovered, confirming active exploitation. A compromised BMC gives attackers full control over server infrastructure.