NetSight
IP …
high7.5

CVE-2018-7942

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability.

Impact

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.

Affected products

VendorProductAffected versions
Huawei1288h V5 Firmware
Version 100r005c00
Huawei2288h V5 Firmware
Version 100r005c00
Huawei2488 V5 Firmware
Version 100r005c00
HuaweiCh242 V3 Firmware
Version 100r001c00
HuaweiCh121l V3 Firmware
Version 100r001c00
HuaweiCh121l V5 Firmware
Version 100r001c00
HuaweiCh121 V3 Firmware
Version 100r001c00

References