Supermicro IPMI Anonymous SSH access

[quad3datwork]

Please be aware that some Supermicro IPMI board allows Anonymous user access via SSH. By default Anonymous user is assigned Administrator access.

Default Anonymous password is "admin".

Quote:$ ssh -o PreferredAuthentications=password,keyboard-interactive -l "" xxx.xxx.xxx.xxx
@xxx.xxx.xxx.xxx's password:
Auth User/Pass with PS...pass.

ATEN SMASH-CLP System Management Shell, version 1.00
Copyright © 2008-2009 by ATEN International CO., Ltd.
All Rights Reserved


->

If you are using such KVMoIP solution, please disable and change Anonymous user password ASAP. You can disable such user with following command (if you run Linux and have ipmitools installed).

Code:

ipmitool user disable 1