CVE-2018-7950

The CVE-2018-7950 issue affects the iBMC (Intelligent Baseboard Management Controller) in some Huawei servers, caused by insufficient input validation in JSON handling. An authenticated, remote attacker can perform a JSON injection to change the administrator password, enabling management privile...

CVE-2018-7951

The CVE-2018-7951 issue affects the iBMC of some Huawei servers. It arises from insufficient input validation and enables an authenticated, remote attacker to perform a JSON injection that can change the administrator password, potentially granting system management privileges. The Huawei advisor...

CVE-2018-7949

CVE-2018-7949 affects the iBMC in Huawei servers. A remote attacker can exploit improper authentication by sending specially crafted login messages to obtain or modify passwords of highly privileged users, causing privilege escalation. Supported by multiple sources (NVD entry and CNVD/Huawei advi...

PT-2018-18347

Name of the Vulnerable Software and Affected Versions: Huawei iBMC affected versions not specified Description: The issue is related to a JSON injection vulnerability due to insufficient input validation in the iBMC of some Huawei servers. An authenticated, remote attacker can exploit this to...

PT-2018-18348

Name of the Vulnerable Software and Affected Versions: Huawei iBMC affected versions not specified Description: The issue is related to a JSON injection vulnerability due to insufficient input validation in the iBMC of some Huawei servers. An authenticated, remote attacker can exploit this to...

CVE-2018-7951: Improper Control of Generation of Code

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to...

CVE-2018-7950: Improper Control of Generation of Code

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to...

CVE-2018-7949: Improper Authentication

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users ...

PT-2018-18346

Name of the Vulnerable Software and Affected Versions: Huawei iBMC affected versions not specified Description: The issue is related to a privilege escalation vulnerability in the Intelligent Baseboard Management Controller iBMC of some Huawei servers. A remote attacker can send specially crafted...

Huawei Patches Four Server Bugs Rated High Severity

Huawei Technologies warned customers of four vulnerabilities rated high that impact 20 of its server models. Patches are available for each of the bugs that range from an authentication bypass vulnerability, privilege escalation vulnerability and two JavaScript Object Notation JSON injection...

Security Advisory - Privilege Escalation Vulnerability in Some Huawei Servers

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users ...

Authentication flaw

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some...

CVE-2018-7942

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some...

CVE-2018-7942

CVE-2018-7942 concerns Huawei servers’ Intelligent Baseboard Management Controller (iBMC). The vulnerability is an authentication bypass caused by improper authentication design, allowing an unauthenticated, remote attacker to send specially crafted messages to the iBMC and potentially disclose s...

CVE-2018-7942: Undefined Security Weakness

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some...

PT-2018-18341

Name of the Vulnerable Software and Affected Versions: Huawei iBMC affected versions not specified Description: The issue is related to an authentication bypass, allowing an unauthenticated, remote attacker to send specially crafted messages to the affected products. This is due to improper...

Security Advisory - Authentication Bypass Vulnerability in Some Huawei Servers

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some...

CVE-2018-7941

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...

Authentication flaw

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...

CVE-2018-7941

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...