CVE-2018-7942

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-05-24 · updated 2026-06-17

Description

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.

Affected products

Huawei 1288H V5 Firmware: 100r005c00
Huawei 2288H V5 Firmware: 100r005c00
Huawei 2488 V5 Firmware: 100r005c00
Huawei Ch121 V3 Firmware: 100r001c00
Huawei Ch121L V3 Firmware: 100r001c00
Huawei Ch121L V5 Firmware: 100r001c00
Huawei Ch242 V3 Firmware: 100r001c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-server-en
https://exchange.xforce.ibmcloud.com/vulnerabilities/143686
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-server-en

Get alerted when CVE-2018-7942 or the next vulnerability affects your stack