Data BreachBleeping Computer
7.5 — HIGH
Over 24,000 exposed server BMCs leak password hash via decades-old flaw
More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Over 24,000 internet-exposed servers are vulnerable to a 20-year-old IPMI 2.0 authentication weakness (CVE-2013-4786), allowing attackers to crack passwords offline using dedicated GPU rigs or similar setups.
⚙️Technical Details
CVEs
CVE-2013-4786
Affected Systems
Intel Intelligent Platform Management InterfaceOracle Fujitsu M10 Firmware
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Servers with exposed BMC interfaces, particularly those using weak passwords or default credentials
🛡️Recommended Actions
1Rotate factory BMC passwords and isolate management networks
2Keep IPMI and Redfish off the public internet
3Restrict access to BMCs and implement stronger authentication protocols
📦Affected Products
Intel Intelligent Platform Management InterfaceOracle Fujitsu M10 FirmwareSupermicro systemsHPE servers
🔐NVD Verified DataVERIFIED
CVE-2013-4786 ↗CVSS 7.5 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeaknesses
CWE-255
Affected Products (CPE)
Intel Intelligent Platform Management InterfaceOracle Fujitsu M10 Firmware
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.