Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've some Supermicro servers with IPMI running, and as described in this blog ( there's a critical vulnerability to get plaintext admin passwords from any remote location.

How to check if my server motherboard is compromised?

share|improve this question
up vote 9 down vote accepted

Simply telnet to the IPMI IP Address in port 49152 and do a specific GET request. You should get your users and passwords if you're compromised.

telnet 49152

After the connection ask for GET /PSBlock and watch the results, it should be something like this:

Connected to
Escape character is '^]'.
GET /PSBlock



To solve this issue update the IPMI firmware to the latest version. The firmware is specific to your IPMI controller, so you should get the specified in Supermicro website.

Then after updating the firmware change your passwords.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.