MINI-GF45-288H-8F86

Bulletin has no description...

MINI-288H-WRRC-PR2X

Bulletin has no description...

MINI-288H-FHVM-C4F4

Bulletin has no description...

MINI-JCW3-RXWF-288H

Bulletin has no description...

Design/Logic Flaw

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

Design/Logic Flaw

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7902

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903

CVE-2018-7903 affects Huawei 1288H V5 and 2288H V5 with software V100R005C00. The vulnerability arises from insufficient input validation in the iBMC JSON handling, allowing an authenticated, remote attacker to perform a JSON injection to change the administrator password and potentially gain man...

CVE-2018-7904

Huawei 1288H V5 / 288H V5 (software V100R005C00) expose a JSON injection vulnerability (CVE-2018-7904) in the iBMC server component due to insufficient input validation. An authenticated, remote attacker can inject JSON to modify the administrator password, enabling management privileges on the s...

CVE-2018-7902

Affected products: Huawei 1288H V5 and 288H V5 with software V100R005C00. Vulnerability: JSON injection in iBMC/server component due to insufficient input validation, allowing an authenticated, remote attacker to inject JSON and modify the administrator password, potentially gaining the system ma...

CVE-2018-7904

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7902: Undefined Security Weakness

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903: Undefined Security Weakness

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7904: Undefined Security Weakness

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...