Vulnerability Details CVE-2018-7942
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2018-7942
-
cpe:2.3:h:huawei:1288h_v5:-
-
cpe:2.3:h:huawei:2288h_v5:-
-
cpe:2.3:h:huawei:2488_v5:-
-
cpe:2.3:h:huawei:ch121_v3:-
-
cpe:2.3:h:huawei:ch121l_v3:-
-
cpe:2.3:h:huawei:ch121l_v5:-
-
cpe:2.3:h:huawei:ch242_v3:-
-
cpe:2.3:o:huawei:1288h_v5_firmware:100r005c00
-
cpe:2.3:o:huawei:2288h_v5_firmware:100r005c00
-
cpe:2.3:o:huawei:2488_v5_firmware:100r005c00
-
cpe:2.3:o:huawei:ch121_v3_firmware:100r001c00
-
cpe:2.3:o:huawei:ch121l_v3_firmware:100r001c00
-
cpe:2.3:o:huawei:ch121l_v5_firmware:100r001c00
-
cpe:2.3:o:huawei:ch242_v3_firmware:100r001c00