Legacy 2002 Vulnerability in Baseboard Management Controllers Enables Remote Server Takeover

A long-standing vulnerability in Baseboard Management Controllers (BMCs) allows attackers to perform offline password-cracking, potentially granting full remote control over internet-exposed servers. While the flaw dates back to 2002, recent evidence suggests active exploitation by threat actors targeting critical infrastructure and enterprise data centers.