BMCRadar — Lava | LAVA

BMC exposure research
BMCRadar24

Last updated 13 Jul 2026

36,872

TotalBMCs exposed to the public internet

24,650

Vulnerable to CVE-2013-4786

5,875

Companies affected

Top 10 countries

by exposed BMCs

n = 36,872 · 13 Jul 2026 scan

Time to crack

a captured credential, offline

Shared factory defaultInstant
HPE iLO factory (8 chars · A-Z 0-9)35 seconds
Supermicro factory (10 chars · A-Z)~30 minutes
Long, random, rotatedForever

offline crack time at ~80 GH/s (commodity GPU) · rotate factory credentials

Hardware breakdown

by management platform

Supermicro50.4%
Dell iDRAC15.3%
HPE iLO8.0%
ASRock Rack3.0%
Lenovo XClarity · Fujitsu iRMC · OpenBMC · AMI MegaRAC SP-X23.3%

responding BMCs · Supermicro leads at 50.4%

Top industries

by exposed BMCs

1Bare-Metal Hosting
2Corporate Infrastructure
3Telecom & ISP
4Universities & Research
5Financial Services
6Government
7Healthcare
8AI/GPU Providers

n = 36,872 · 13 Jul 2026 scan

Exposed BMCs

fewermore