CVE-2018-7943

HIGH

Huawei Server Firmware - Authentication Bypass via Special Operations

Title source: llm
STIX 2.1

Description

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.0020
EPSS Percentile 41.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (20)
huawei/1288h_v5_firmware v100r005c00
huawei/2288h_v5_firmware v100r005c00
huawei/2488_v5_firmware v100r005c00
huawei/ch121_v3_firmware v100r001c00
huawei/ch121_v5_firmware v100r001c00
huawei/ch121l_v3_firmware v100r001c00
huawei/ch121l_v5_firmware v100r001c00
huawei/ch140_v3_firmware v100r001c00
huawei/ch140l_v3_firmware v100r001c00
huawei/ch220_v3_firmware v100r001c00
... and 10 more
Published Jun 05, 2018
Tracked Since Feb 18, 2026