Baseboard management controllers, or BMCs, are small computers built into nearly every enterprise server. They have their own firmware, operating system, network stack, and IP address. Administrators...

Over 24,000 internet-accessible servers expose authentication hashes before login due to CVE-2013-4786, a 22-year-old vulnerability in BMCs.

Baseboard management controllers from the world's biggest manufacturers are a security mess.