CVE-2018-7942
published 2018-05-24CVE-2018-7942: The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker…
high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | 1288h_v5_firmware | — | — |
| huawei | 2288h_v5_firmware | — | — |
| huawei | 2488_v5_firmware | — | — |
| huawei | ch121_v3_firmware | — | — |
| huawei | ch121l_v3_firmware | — | — |
| huawei | ch121l_v5_firmware | — | — |
| huawei | ch242_v3_firmware | — | — |
| x.org | libx11 | >= 0 < 2:1.6.2-1ubuntu2.1 | 2:1.6.2-1ubuntu2.1 |
| x.org | libx11 | >= 0 < 2:1.6.3-1ubuntu2.1 | 2:1.6.3-1ubuntu2.1 |
| x.org | libx11 | >= 0 < 2:1.6.4-3ubuntu0.1 | 2:1.6.4-3ubuntu0.1 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
osv9.8CRITICAL