I reported that around 7 years ago. They called it a feature - 'failover' so you can get inside a server in a fault scenario. To this day, you can still shodan

I reported that around 7 years ago. They called it a feature - 'failover' so you can get inside a server in a fault scenario. To this day, you can still shodan scan for open supermicro ipmi web interfaces on the internet. Btw, if you didn't know, the SuperMicro ipmicfg utility makes it super easy to interface with the BMC and reset the IPMI from a booted system. From there, you can reconfigure IPMI then mount whatever ISO or slip in some shitty UEFI rootkit. SuperMicro fills need for me of offering the exact server configurations and in the sizes I need. They're also a favorite target for supply chain attacks. But otherwise, i can promise you they will never give a shit about security. I'm not even sure if it's a security thing, it might be that they have backdoor compliance to be implemented if they want to be able sell their hardware in north korea & sudan. It's probably just cost-effective to have all the servers be universally backdoorable - i know I don't mind when i come across supermicro servers on pentest engagements