1. Home
  2. CVE Database
  3. CVE-2018-7949
HIGH · 8.8

CVE-2018-7949

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affecte...

Vulnerability Description

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users to get or modify passwords of highly privileged users.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Huawei1288H V5 Firmware100r005c00
Huawei1288H V5-
Huawei2288H V5 Firmware100r005c00
Huawei2288H V5-
Huawei2488 V5 Firmware100r005c00
Huawei2488 V5-
HuaweiCh121 V3 Firmware100r001c00
HuaweiCh121 V3-
HuaweiCh121L V3 Firmware100r001c00
HuaweiCh121L V3-
HuaweiCh121L V5 Firmware100r001c00
HuaweiCh121L V5-
HuaweiCh121 V5 Firmware100r001c00
HuaweiCh121 V5-
HuaweiCh140 V3 Firmware100r001c00
HuaweiCh140 V3-
HuaweiCh140L V3 Firmware100r001c00
HuaweiCh140L V3-
HuaweiCh220 V3 Firmware100r001c00
HuaweiCh220 V3-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2018-7949?

CVE-2018-7949 is a vulnerability with a CVSS score of 8.8 (HIGH). The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affecte...

How severe is CVE-2018-7949?

CVE-2018-7949 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7949?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei 1288H V5 Firmware, Huawei 1288H V5, Huawei 2288H V5 Firmware, Huawei 2288H V5, Huawei 2488 V5 Firmware.