4 ms·
In proper environment the BMC is on its own dedicated NIC with no way to bridge to that network from the machine and only access from host machine being from r
by ilyt 4y ago
In proper environment the BMC is on its own dedicated NIC with no way to bridge to that network from the machine and only access from host machine being from root/admin account.
And then there are people that just port-forward BMC ports to the internet as cheap remote KVM...
- Graziano_M 4y agoThe operative word being "proper". In practice I see it accessible on the LAN far too often. The ipmi v2 protocol is so bad that if you just request to login with a known account name (which is probably 'admin') the BMC server will _provide you the password hash_ for you to crack at your leisure.