high8.8
CVE-2018-7950
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation.
Impact
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | 1288h V5 Firmware | Version 100r005c00 |
| Huawei | 2288h V5 Firmware | Version 100r005c00 |
| Huawei | 2488 V5 Firmware | Version 100r005c00 |
| Huawei | Ch121 V3 Firmware | Version 100r001c00 |
| Huawei | Ch121l V3 Firmware | Version 100r001c00 |
| Huawei | Ch121l V5 Firmware | Version 100r001c00 |
| Huawei | Ch121 V5 Firmware | Version 100r001c00 |
| Huawei | Ch140 V3 Firmware | Version 100r001c00 |
| Huawei | Ch140l V3 Firmware | Version 100r001c00 |
| Huawei | Ch220 V3 Firmware | Version 100r001c00 |
| Huawei | Ch222 V3 Firmware | Version 100r001c00 |
| Huawei | Ch242 V3 Firmware | Version 100r001c00 |