CVSS: 9.0EPSS: 0%CPEs: 40EXPL: 0CVE-2018-7950
https://notcve.org/view.php?id=CVE-2018-7950
01 Jun 2018 — The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system. iBMC (Intelligent Baseboard Management Controller) en algunos servidores Huawei tiene una vulnerabilidad de inyección JSON debido a una validación de entradas insuficie... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-02-server-en • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.8EPSS: 0%CPEs: 40EXPL: 0CVE-2018-7949
https://notcve.org/view.php?id=CVE-2018-7949
01 Jun 2018 — The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users to get or modify passwords of highly privileged users. iBMC (Intelligent Baseboard Management Controller) en algunos servidores Huawei tiene una vulnerabilidad de escalado de privilegios. Un atacante remoto no aut... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-03-server-en • CWE-287: Improper Authentication •
CVSS: 9.0EPSS: 0%CPEs: 40EXPL: 0CVE-2018-7951
https://notcve.org/view.php?id=CVE-2018-7951
01 Jun 2018 — The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system. iBMC (Intelligent Baseboard Management Controller) en algunos servidores Huawei tiene una vulnerabilidad de inyección JSON debido a una validación de entradas insuficie... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-02-server-en • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.8EPSS: 0%CPEs: 40EXPL: 0CVE-2018-7941
https://notcve.org/view.php?id=CVE-2018-7941
10 May 2018 — Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation. Huawei iBMC V200R002C60 tiene una vulnerabilidad de omisión de autenticación. Un atacante remoto con bajos privilegios puede manipular mensajes específicos para subir un certificado de autenticación en los product... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180509-01-bypass-en • CWE-287: Improper Authentication •
CVSS: 7.1EPSS: 0%CPEs: 20EXPL: 0CVE-2015-7842
https://notcve.org/view.php?id=CVE-2015-7842
09 Oct 2017 — Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software be... • http://www.securityfocus.com/bid/76836 • CWE-275: Permission Issues •