High severity8.8NVD Advisory· Published Jun 1, 2018· Updated Jun 17, 2026
CVE-2018-7951
CVE-2018-7951
Description
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22- cpe:2.3:o:huawei:1288h_v5_firmware:100r005c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:2288h_v5_firmware:100r005c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:2488_v5_firmware:100r005c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch121_v3_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch121_v5_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch121l_v3_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch121l_v5_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch140_v3_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch140l_v3_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch220_v3_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch222_v3_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch242_v3_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ch242_v5_firmware:100r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:rh1288_v3_firmware:100r003c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:rh2288_v3_firmware:100r003c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:rh2288h_v3_firmware:100r003c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:xh310_v3_firmware:100r003c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:xh321_v3_firmware:100r003c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:xh321_v5_firmware:100r005c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:xh620_v3_firmware:100r003c00:*:*:*:*:*:*:*
- Huawei Technologies Co., Ltd./1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3v5Range: 1288H V5 V100R005C00
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.