VulnerabilityPublished 4 Aug 2026

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks

Source SecurityWeek

Mentioned vulnerabilities

CVE-2013-4786

Severity

Medium

Rated by Threat Radar

Data as of 4 Aug 2026, 17:45 UTC

What to do

AI-suggested

Until official patches or mitigations are available, organizations should restrict network access to UDP port 623 to trusted management networks only and audit BMC accounts for weak, default, or predictable passwords, changing them to strong, unique credentials. Monitoring and protecting BMC interfaces should be prioritized given their critical role in infrastructure management.

Description

Over 24,000 internet-accessible server-management interfaces disclose authentication hashes before login. The post Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks appeared first on SecurityWeek .

Impact

Attackers can obtain password hashes from exposed BMC interfaces and perform offline cracking to recover weak or default passwords. Successful exploitation can grant privileged access to server management functions, potentially allowing attackers to control critical infrastructure components within data centers. This can lead to unauthorized firmware updates, power cycling, and configuration changes. The presence of weak and predictable passwords exacerbates the risk. However, exploitation requires network access to UDP port 623 and offline cracking efforts.

Summary

The vulnerability CVE-2013-4786, introduced in 2004 in the IPMI 2.0 authentication protocol, allows an unauthenticated remote attacker to request an HMAC-SHA1 authentication code from a BMC via UDP port 623. This HMAC is calculated using the account password and session values known to the requester, enabling offline password recovery without repeated online login attempts. Lava's research found over 24,000 internet-accessible BMC interfaces exposing these hashes, with many using weak or default passwords. BMCs control critical server management functions, including power cycling and firmware updates, making exploitation a serious threat to data center security. The vulnerability affects implementations sharing user databases across IPMI, Redfish API, and web interfaces. The issue highlights a broader security gap in data center management planes, where BMCs often lack adequate monitoring and protection.

References

securityweek.com/decades-old-bmc-vulnerability-exposes-thousands-of-data-centers-to-attacks/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 4 Aug 2026, 10:03 UTC

References

Community reviews