Thousands of servers can be backdoored by exploiting buggy motherboard controllers

This report summarizes multiple critical vulnerabilities in baseboard management controllers and out-of-band interfaces (IPMI/BMC/ILO/SSH/KVM) across major vendors (HPE, Supermicro, Intel legacy, Dell, Huawei, OpenBMC, H3C). Issues include failure to enforce session integrity/encryption allowing unsigned commands on secured sessions, predictable session identifiers enabling session takeover, pre-auth memory corruption in management SSH leading to possible RCE, unsigned or attacker-controllable firmware enabling persistent implants, extraction of secrets from firmware usable as live credentials, and weak/default factory-random credentials recoverable via offline cracking; proof-of-concept exploit chaining is demonstrated.