Huawei Technologies Co., Ltd. Ibmc vulnerabilities

2 vulnerabilities

Known vulnerabilities in Huawei Technologies Co., Ltd. Ibmc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-7941huawei technologies co., ltd.ibmc+20
EPSS score
0.75%
Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation.4.3CVE-2017-17323huawei technologies co., ltd.ibmc+1
EPSS score
0.54%
Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.