Huawei Technologies Co Ltd Ibmc vulnerabilities

CVE-2018-7941 [HIGH] CWE-287 CVE-2018-7941: Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low priv Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation.

CVE-2017-17323 [MEDIUM] CWE-863 CVE-2017-17323: Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.