More than 32,000 servers containing motherboards manufactured by Supermicro expose admin passwords in the clear, it is a godsend for hackers. The flaw relates to a component in the baseboard management controller (BMC) which allows administrators to monitor physical parameters (e.g. Temperatures, fan speed, disk and memory performance) of a large number of servers. The controller in Supermicro motherboards contains a binary file which contains remote login passwords in clear text. The vulnerability involves a plaintext password file available for download simply by connecting to the specific port.”]
Source: https://securityaffairs.co/wordpress/25921/hacking/32000-servers-expose-admin-pwd.html