CVE-2018-7942

published 2018-05-24

CVE-2018-7942: The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker…

Priority P3 47 high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C H I N A N

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
huawei	1288h_v5_firmware	—	—
huawei	2288h_v5_firmware	—	—
huawei	2488_v5_firmware	—	—
huawei	ch121_v3_firmware	—	—
huawei	ch121l_v3_firmware	—	—
huawei	ch121l_v5_firmware	—	—
huawei	ch242_v3_firmware	—	—
x.org	libx11	>= 0 < 2:1.6.2-1ubuntu2.1	2:1.6.2-1ubuntu2.1
x.org	libx11	>= 0 < 2:1.6.3-1ubuntu2.1	2:1.6.3-1ubuntu2.1
x.org	libx11	>= 0 < 2:1.6.4-3ubuntu0.1	2:1.6.4-3ubuntu0.1

CVSS provenance

nvd v3.0 7.5 HIGH CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

osv 9.8 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.