7.5

CVE-2018-7942

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ 1288h V5 Firmware Version 100r005c00
   Huawei ≫ 1288h V5 Version -
Huawei ≫ 2288h V5 Firmware Version 100r005c00
   Huawei ≫ 2288h V5 Version -
Huawei ≫ 2488 V5 Firmware Version 100r005c00
   Huawei ≫ 2488 V5 Version -
Huawei ≫ Ch242 V3 Firmware Version 100r001c00
   Huawei ≫ Ch242 V3 Version -
Huawei ≫ Ch121l V3 Firmware Version 100r001c00
   Huawei ≫ Ch121l V3 Version -
Huawei ≫ Ch121l V5 Firmware Version 100r001c00
   Huawei ≫ Ch121l V5 Version -
Huawei ≫ Ch121 V3 Firmware Version 100r001c00
   Huawei ≫ Ch121 V3 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.63% 0.732
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-server-en
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/143686
Third Party Advisory