CVE-2018-7949: High severity Huawei 1288h V5 Firmware vulnerability
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users to get or modify passwords of highly privileged users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7949?
CVE-2018-7949 has a medium severity rating due to its potential for privilege escalation.
How do I fix CVE-2018-7949?
To fix CVE-2018-7949, update the affected Huawei firmware to the latest patched version.
Which Huawei servers are affected by CVE-2018-7949?
CVE-2018-7949 affects multiple Huawei servers running specific firmware versions, including the Huawei 1288h V5, 2288h V5, and 2488 V5.
What type of vulnerability is CVE-2018-7949?
CVE-2018-7949 is a privilege escalation vulnerability that allows low-privileged users to gain higher privileges.
Can CVE-2018-7949 be exploited remotely?
Yes, CVE-2018-7949 can be exploited remotely by sending specially crafted login messages to the affected devices.