CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2018-7942
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:1288h_v5_firmware
- huawei:2288h_v5_firmware
- huawei:2488_v5_firmware
- huawei:ch121_v3_firmware
- huawei:ch121l_v3_firmware
- huawei:ch121l_v5_firmware
- huawei:ch242_v3_firmware