24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

To counter the risk, it's advised to block UDP port 623 at the network edge, rotate factory-issued passwords during provisioning, disable legacy or weak options such as IPMI 1.5, restrict BMC access to a dedicated private management network, and apply network access controls to ensure only approved administrative systems can reach BMC interfaces.

Seems even IPMI 2.0 won't fix this either

Keep your BMCs OoB...

Fucking hell

Only the hashes? Supermicro must have upped their game. You used to be able to get them to spit out their IPMI passwords in plaintext.