← CVE Intelligence

CVE-2018-7951

Huawei Technologies Co., Ltd. / 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3 PUBLISHED

Description (CNA)

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.

Affected (CNA)

Vendor / productVersions
Huawei Technologies Co., Ltd. / 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3affected 1288H V5 V100R005C00; affected 2288H V5 V100R005C00; affected 2488 V5 V100R005C00; affected CH121 V3 V100R001C00; affected CH121L V3 V100R001C00; affected CH121L V5 V100R001C00; affected CH121 V5 V100R001C00; affected CH140 V3 V100R001C00; affected CH140L V3 V100R001C00; affected CH220 V3 V100R001C00; affected CH222 V3 V100R001C00; affected CH242 V3 V100R001C00; affected CH242 V5 V100R001C00; affected RH1288 V3 V100R003C00; affected RH2288 V3 V100R003C00; affected RH2288H V3 V100R003C00; affected XH310 V3 V100R003C00; affected XH321 V3 V100R003C00; affected XH321 V5 V100R005C00; affected XH620 V3 V100R003C00

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.