Redfish
A modern REST API standard for remotely managing server and infrastructure hardware, succeeding legacy IPMI.
Current numbers
CVSS 10.0CVE-2024-54085 AMI MegaRAC BMC auth-bypass via Redfish; added to CISA KEV 25 Jun 2025; OEM'd across 12+ server vendors
1,000+internet-exposed MegaRAC SP-X Redfish instances found, each potentially exploitable for remote takeover/bricking
~15 minGPU firmware staging time per node; plus several min to activate across reset, back-to-back under current PLDM/Redfish