Multiple Huawei Server Authentication Bypass Vulnerabilities

Huawei 1288H V5 and others are different models of server equipment from Huawei, China. An authentication bypass vulnerability exists in several Huawei servers, which stems from an imperfect authentication mechanism. A remote attacker can exploit this vulnerability to bypass authentication and ga...

Huawei 1288H V5 and 2288H V5 JSON Injection Vulnerability (CNVD-2018-10504)

The Huawei 1288H V5 and 2288H V5 are both rackmount server units from Huawei, a Chinese company. A security vulnerability exists in Huawei 1288H V5 and 2288H V5 version V100R005C00, which originates from the program failing to adequately validate input. A remote attacker can exploit the...

Huawei 1288H V5 and 2288H V5 JSON Injection Vulnerability

The Huawei 1288H V5 and 2288H V5 are both rackmount server units from Huawei, a Chinese company. A security vulnerability exists in Huawei 1288H V5 and 2288H V5 version V100R005C00, which originates from the program failing to adequately validate input. A remote attacker can exploit the...

CVE-2018-7902

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

Design/Logic Flaw

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

Design/Logic Flaw

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7904

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7904

Huawei 1288H V5 / 288H V5 (software V100R005C00) expose a JSON injection vulnerability (CVE-2018-7904) in the iBMC server component due to insufficient input validation. An authenticated, remote attacker can inject JSON to modify the administrator password, enabling management privileges on the s...

CVE-2018-7902

Affected products: Huawei 1288H V5 and 288H V5 with software V100R005C00. Vulnerability: JSON injection in iBMC/server component due to insufficient input validation, allowing an authenticated, remote attacker to inject JSON and modify the administrator password, potentially gaining the system ma...

CVE-2018-7903

CVE-2018-7903 affects Huawei 1288H V5 and 2288H V5 with software V100R005C00. The vulnerability arises from insufficient input validation in the iBMC JSON handling, allowing an authenticated, remote attacker to perform a JSON injection to change the administrator password and potentially gain man...