CVE-2018-7942
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an...
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
- Record
CVE-2018-7942- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
- Record
CVE-2018-7942- Updated
- 2026-11-02
EUVDEUVD-2018-19654 No score
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
- Record
EUVD-2018-19654- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-87gh-g484-3wp7
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an...
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
- Record
GHSA-87gh-g484-3wp7- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
- huawei 1288h v5 firmware
- huawei 2288h v5 firmware
- huawei 2488 v5 firmware
- huawei ch121 v3 firmware
- huawei ch121l v3 firmware
- huawei ch121l v5 firmware
- huawei ch242 v3 firmware
- huawei technologies co., ltd. 1288h v5; 2288h v5; 2488 v5; ch121 v3; ch121l v3; ch121l v5; ch121 v5; ch140 v3; ch140l v3; ch220 v3; ch222 v3; ch242 v3; ch242 v5; rh1288 v3; rh2288 v3; rh2288h v3; xh310 v3; xh321 v3; xh321 v5; xh620 v3
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-7942 is a high vulnerability (CVSS 7.5) in Huawei 1288h V5 Firmware, published May 24, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.58%, the 75th percentile. No source names a fixed version.