Summary
Supermicro IPMI/BMC Plaintext Password Disclosure
Impact
Successful exploitation will allow attackers to obtain sensitive information that may aid in further attacks
Solution
Ask the vendor for an update.
Insight
BMCs in Supermicro motherboards contain a binary file that stores remote login passwords in clear text. This file could be retrieved by requesting /PSBlock on port 49152
Affected
Motherboards manufactured by Supermicro
Detection
Send a HTTP GET request and check the response.
References
Updated on 2015-03-25
