Over 24,000 internet-accessible servers expose authentication hashes before login due to CVE-2013-4786, a 22-year-old vulnerability in BMCs.

Over 24,000 internet-accessible servers expose authentication hashes before login due to CVE-2013-4786, a 22-year-old vulnerability in BMCs.

Baseboard management controllers, or BMCs, are small computers built into nearly every enterprise server. They have their own firmware, operating system, network stack, and IP…