24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Lava researchers found 36,872 internet-exposed BMC interfaces running IPMI, of which 24,650 disclose password-derived authentication hashes before login through CVE-2013-4786, a flaw Dell describes as inherent to the IPMI v2.0 specification with no patch....