Intelligent Platform Management Interface (IPMI) is a server-management protocol used to monitor and control hardware remotely. It works through the baseboard management controller (BMC), an out-of-band chip that can stay active even when the operating system is down.
IPMI matters in cyber security because it sits below normal host defenses. If exposed to the internet, it can let attackers scan, enumerate, or attempt access to critical infrastructure outside the usual login path. In some environments, IPMI authentication handshakes can reveal password-derived material, which may support offline password guessing after capture.
Defenders reduce risk by isolating management networks, restricting access to trusted administrators, and disabling remote IPMI features such as IPMI-over-LAN when they are not needed. Treating IPMI as part of the attack surface is essential: compromise of the management plane can provide powerful control over the server itself.