High severity7.1NVD Advisory· Published Oct 10, 2017· Updated May 13, 2026

CVE-2015-7842

Description

Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 allow remote authenticated operators to change server information by leveraging failure to verify user permissions.

Affected products

Huawei/Ch121 V3 Firmware
cpe:2.3:o:huawei:ch121_v3_firmware:*:*:*:*:*:*:*:*
Range: <=v100r001c00
Huawei/Ch220 V3 Firmware
cpe:2.3:o:huawei:ch220_v3_firmware:*:*:*:*:*:*:*:*
Range: <=v100r001c00
Huawei/Ch222 V3 Firmware
cpe:2.3:o:huawei:ch222_v3_firmware:*:*:*:*:*:*:*:*
Range: <=v100r001c00
Huawei/Rh1288a V2 Firmware
cpe:2.3:o:huawei:rh1288a_v2_firmware:*:*:*:*:*:*:*:*
Range: <=v100r002c00
Huawei/Rh1288 V3 Firmware
cpe:2.3:o:huawei:rh1288_v3_firmware:*:*:*:*:*:*:*:*
Range: <=v100r003c00spc100
Huawei/Rh2288a V2 Firmware
cpe:2.3:o:huawei:rh2288a_v2_firmware:*:*:*:*:*:*:*:*
Range: <=v100r002c00
Huawei/Rh2288h V3 Firmware
cpe:2.3:o:huawei:rh2288h_v3_firmware:*:*:*:*:*:*:*:*
Range: <=v100r003c00
Huawei/Rh2288 V3 Firmware
cpe:2.3:o:huawei:rh2288_v3_firmware:*:*:*:*:*:*:*:*
Range: <=v100r003c00
Huawei/Rh8100 V3 Firmware
cpe:2.3:o:huawei:rh8100_v3_firmware:*:*:*:*:*:*:*:*
Range: <=v100r003c00
Huawei/Xh628 V3 Firmware
cpe:2.3:o:huawei:xh628_v3_firmware:*:*:*:*:*:*:*:*
Range: <=v100r003c00

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/76836nvdThird Party AdvisoryVDB Entry
www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000