CVE-2013-4786 is a 20-year-old IPMI 2.0 authentication weakness rooted in a protocol introduced in 2004. The vulnerability allows attackers to request an authentication response (captured during the IPMI handshake) that can then be used to crack the password offline using GPU rigs or similar setups. Researchers at Lava scanned for publicly accessible IPMI services on UDP port 623 and found 36,872 internet-exposed hosts. Of those, 24,650 exposed password-derived authentication material usable for offline password cracking. Additionally, 6,240 hosts accepted an empty username during authentication and were found to use weak passwords. A further 2,340 instances used weak administrator passwords matching public dictionaries. The United States accounts for 39% of vulnerable servers. Many exposed BMCs are Supermicro systems using a 10-character uppercase default password printed on the chassis label with the username 'ADMIN'. Researchers estimated recovering an HPE factory password would take approximately 1 day per captured response on an Apple M3 system. At least one internet-exposed HPE iLO 4 login page was found displaying a ransom note demanding 0.3 BTC, indicating active exploitation. In AI environments with poorly segmented infrastructure, compromise of one physical server could affect multiple tenants through virtualization, GPU partitioning, or other sharing mechanisms.