VULNERABILITY INTELLIGENCE
CVE-2018-7942
CVSS score7.5 HIGH
EPSS probability1.61%
CISA KEVNot currently listed
Published2018-05-24
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
Primary references
- psirt@huawei.com — Broken Link
- nvd@nist.gov — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link