A Baseboard Management Controller is a separate embedded chip on a server motherboard that provides out-of-band management. It can power the machine on or off, read hardware sensors, and give administrators remote console access even when the main operating system is down, broken, or powered off. Because it runs independently, a BMC is part of the server’s control plane, not just another application service.
In cyber security, BMCs matter because their reach often extends beyond normal host defenses. If management interfaces such as IPMI are exposed to the internet, attackers can scan them, try default credentials, or abuse weaknesses in the authentication exchange to support offline password guessing. A compromise here is dangerous because it can bypass the OS entirely and give control of the hardware itself. Defenders usually reduce risk by isolating BMC networks, restricting trusted admin sources, and disabling remote management features that are not needed.