importantSYS.SOURCE: The Hacker News• 2026-07-28T20:11:36+05:30

24,650 Internet-Exposed BMCs Reveal IPMI Password Hashes Due to CVE-2013-4786 Vulnerability

#vulnerability #hardware security #password security

Over 24,650 internet-exposed BMCs reveal IPMI password hashes due to a 20-year-old vulnerability (CVE-2013-4786), enabling offline credential cracking and posing significant risks to data center security.

Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform Management Interface (IPMI) protocol to the public internet.

Of the 36,872 internet-exposed server-management interfaces running IPMI, 24,650 have been found to disclose password-derived authentication hashes before login due to

Read original article

*** END OF TRANSMISSION ***

> ADOBE CAMPAIGN CLASSIC CVSS 10.0 CRITICAL VULNERABILITY ENABLES ARBITRARY CODE EXECUTION WITHOUT USER INTERACTION > HIJACKED HOTEL WI-FI NETWORKS EXPLOIT FAKE UPDATES TO DEPLOY SURVEILLANCE MALWARE > TEN CRITICAL ISSUES IMPACTING NAS SYSTEMS > THE PURPOSE AND VALUE OF LIBERAL ARTS EDUCATION IN MODERN CAREER DEVELOPMENT > DEVELOPMENT PIPELINE AS CRITICAL PRODUCTION SYSTEM IN SOFTWARE ENGINEERING > FLINT: A VISUALIZATION LANGUAGE FOR THE AI ERA > CHALLENGES IN MODERATING A MATRIX COMMUNITY: A WEEK-LONG EXPERIENCE > THE CHALLENGE OF EXISTENCE: A MINDFULNESS PRACTICE FOR PRESENT-MOMENT AWARENESS > OPENAI INVESTIGATES MULTIPLE AI AGENT ESCAPES FROM TEST ENVIRONMENTS > RIVIAN SPINOFF ALSO BEGINS E-BIKE DELIVERIES AMID SUPPLY CHAIN CHALLENGES> ADOBE CAMPAIGN CLASSIC CVSS 10.0 CRITICAL VULNERABILITY ENABLES ARBITRARY CODE EXECUTION WITHOUT USER INTERACTION > HIJACKED HOTEL WI-FI NETWORKS EXPLOIT FAKE UPDATES TO DEPLOY SURVEILLANCE MALWARE > TEN CRITICAL ISSUES IMPACTING NAS SYSTEMS > THE PURPOSE AND VALUE OF LIBERAL ARTS EDUCATION IN MODERN CAREER DEVELOPMENT > DEVELOPMENT PIPELINE AS CRITICAL PRODUCTION SYSTEM IN SOFTWARE ENGINEERING > FLINT: A VISUALIZATION LANGUAGE FOR THE AI ERA > CHALLENGES IN MODERATING A MATRIX COMMUNITY: A WEEK-LONG EXPERIENCE > THE CHALLENGE OF EXISTENCE: A MINDFULNESS PRACTICE FOR PRESENT-MOMENT AWARENESS > OPENAI INVESTIGATES MULTIPLE AI AGENT ESCAPES FROM TEST ENVIRONMENTS > RIVIAN SPINOFF ALSO BEGINS E-BIKE DELIVERIES AMID SUPPLY CHAIN CHALLENGES