CVE-2018-7951
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2018
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
- Vendor
- Huawei Technologies Co., Ltd.
- Product
- 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1288H V5 V100R005C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2288H V5 V100R005C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2488 V5 V100R005C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH121 V3 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH121L V3 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH121L V5 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH121 V5 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH140 V3 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH140L V3 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH220 V3 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH222 V3 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH242 V3 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| CH242 V5 V100R001C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| RH1288 V3 V100R003C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| RH2288 V3 V100R003C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| RH2288H V3 V100R003C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| XH310 V3 V100R003C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| XH321 V3 V100R003C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| XH321 V5 V100R005C00 | affected | Unavailable | Unavailable | Unavailable | None listed |
| XH620 V3 V100R003C00 | affected | Unavailable | Unavailable | Unavailable | None listed |