The IPMI functionality of some Supermicro mainboards comes with two admin accounts by default but the manufacturer only notes that you should change the password for the ADMIN account. However, a second account, Anonymous, exists.
ebfaa994a643bb9852478e388c13bab8563b97143563b75575a02e698e38f9a1
SuperMicro IPMI version 03.40 suffers from a cross site request forgery vulnerability.
f0c9c09b826203240ee4c6af353756b9f273a44846c5e01f9f40f3ee9ca0f51c