Description (CNA)
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huawei Technologies Co., Ltd. / 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3 | affected 1288H V5 V100R005C00; affected 2288H V5 V100R005C00; affected 2488 V5 V100R005C00; affected CH121 V3 V100R001C00; affected CH121L V3 V100R001C00; affected CH121L V5 V100R001C00; affected CH121 V5 V100R001C00; affected CH140 V3 V100R001C00; affected CH140L V3 V100R001C00; affected CH220 V3 V100R001C00; affected CH222 V3 V100R001C00; affected CH242 V3 V100R001C00; affected CH242 V5 V100R001C00; affected RH1288 V3 V100R003C00; affected RH2288 V3 V100R003C00; affected RH2288H V3 V100R003C00; affected XH310 V3 V100R003C00; affected XH321 V3 V100R003C00; affected XH321 V5 V100R005C00; affected XH620 V3 V100R003C00 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.