First published: Thu May 10 2018(Updated: )
Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Ch121 V3 Firmware | =100r001c00 | |
Huawei Ch121 V3 | ||
Huawei Ch121l V3 Firmware | =100r001c00 | |
Huawei Ch121l V3 | ||
Huawei Ch140 V3 Firmware | =100r001c00 | |
Huawei Ch140 V3 | ||
Huawei Ch140l V3 Firmware | =100r001c00 | |
Huawei Ch140l V3 | ||
Huawei Ch220 V3 Firmware | =100r001c00 | |
Huawei Ch220 V3 | ||
Huawei Ch222 V3 Firmware | =100r001c00 | |
Huawei Ch222 V3 | ||
Huawei Ch242 V3 Firmware | =100r001c00 | |
Huawei Ch242 V3 | ||
Huawei Rh1288 V3 Firmware | =100r003c00 | |
Huawei Rh1288 V3 | ||
Huawei Rh2288 V3 Firmware | =100r003c00 | |
Huawei Rh2288 V3 | ||
Huawei Rh2288h V3 Firmware | =100r003c00 | |
Huawei Rh2288h V3 | ||
Huawei Xh310 V3 Firmware | =100r003c00 | |
Huawei Xh310 V3 | ||
Huawei Xh321 V3 Firmware | =100r003c00 | |
Huawei Xh321 V3 | ||
Huawei Xh620 V3 Firmware | =100r003c00 | |
Huawei Xh620 V3 | ||
Huawei Ch121 V5 Firmware | =100r001c00 | |
Huawei Ch121 V5 | ||
Huawei Ch121l V5 Firmware | =100r001c00 | |
Huawei Ch121l V5 | ||
Huawei Ch242 V5 Firmware | =100r001c00 | |
Huawei Ch242 V5 | ||
Huawei 1288h V5 Firmware | =100r005c00 | |
Huawei 1288H V5 | ||
Huawei 2288h V5 Firmware | =100r005c00 | |
Huawei 2288h V5 | ||
Huawei 2488 V5 Firmware | =100r005c00 | |
Huawei 2488 V5 | ||
Huawei Xh321 V5 Firmware | =100r005c00 | |
Huawei Xh321 V5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.