Improper authentication in Huawei iBMC
Priority LOW 39CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation.
Why it matters now
EPSS 0.00751 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | iBMC | V200R002C60 | — | No fix listed | CNA |
- iBMC VendorHuawei Affected V200R002C60 Fixed in — No fix listed CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:ch121_v3_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch121_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ch121l_v3_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch121l_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ch140_v3_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch140_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ch140l_v3_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch140l_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ch220_v3_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch220_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:ch121_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch121_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ch121l_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch121l_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ch140_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch140_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ch140l_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch140l_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ch220_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch220_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:ch222_v3_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch222_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ch242_v3_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch242_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:rh1288_v3_firmware:100r003c00:*:*:*:*:*:*:* | 100r003c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:rh1288_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:rh2288_v3_firmware:100r003c00:*:*:*:*:*:*:* | 100r003c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:rh2288_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:rh2288h_v3_firmware:100r003c00:*:*:*:*:*:*:* | 100r003c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:rh2288h_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:xh310_v3_firmware:100r003c00:*:*:*:*:*:*:* | 100r003c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:xh310_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:xh321_v3_firmware:100r003c00:*:*:*:*:*:*:* | 100r003c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:xh321_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:xh620_v3_firmware:100r003c00:*:*:*:*:*:*:* | 100r003c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:xh620_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ch121_v5_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch121_v5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ch121l_v5_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch121l_v5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ch242_v5_firmware:100r001c00:*:*:*:*:*:*:* | 100r001c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ch242_v5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:1288h_v5_firmware:100r005c00:*:*:*:*:*:*:* | 100r005c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:1288h_v5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:2288h_v5_firmware:100r005c00:*:*:*:*:*:*:* | 100r005c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:2288h_v5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:2488_v5_firmware:100r005c00:*:*:*:*:*:*:* | 100r005c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:2488_v5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:xh321_v5_firmware:100r005c00:*:*:*:*:*:*:* | 100r005c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:xh321_v5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:ch222_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch222_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ch242_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch242_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:rh1288_v3_firmware:100r003c00:*:*:*:*:*:*:* Versions 100r003c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:rh1288_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:rh2288_v3_firmware:100r003c00:*:*:*:*:*:*:* Versions 100r003c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:rh2288_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:rh2288h_v3_firmware:100r003c00:*:*:*:*:*:*:* Versions 100r003c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:rh2288h_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:xh310_v3_firmware:100r003c00:*:*:*:*:*:*:* Versions 100r003c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:xh310_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:xh321_v3_firmware:100r003c00:*:*:*:*:*:*:* Versions 100r003c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:xh321_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:xh620_v3_firmware:100r003c00:*:*:*:*:*:*:* Versions 100r003c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:xh620_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ch121_v5_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch121_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ch121l_v5_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch121l_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ch242_v5_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ch242_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:1288h_v5_firmware:100r005c00:*:*:*:*:*:*:* Versions 100r005c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:1288h_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:2288h_v5_firmware:100r005c00:*:*:*:*:*:*:* Versions 100r005c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:2288h_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:2488_v5_firmware:100r005c00:*:*:*:*:*:*:* Versions 100r005c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:2488_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:xh321_v5_firmware:100r005c00:*:*:*:*:*:*:* Versions 100r005c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:xh321_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-7941
- 2026-10-03 Alias added: GHSA-3jmp-4qpg-7fv3
References
More Huawei 1288h V5 Firmware vulnerabilities
- TI-2018-05755 Code injection in Huawei 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5… CVSS 3.0HIGH 8.8
- TI-2018-05754 Code injection in Huawei 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5… CVSS 3.0HIGH 8.8
- TI-2018-05749 Improper authentication in Huawei 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3… CVSS 3.0HIGH 8.8
- TI-2018-05753 Improper authentication in Huawei 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3… CVSS 3.0HIGH 8.8
- TI-2018-05722 Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection… CVSS 3.0HIGH 8.8
- TI-2018-05721 Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection… CVSS 3.0HIGH 8.8
Sources
- CVE-2018-7941 · CVE Program
- CVE-2018-7941 · NVD
- FIRST EPSS
- GHSA-3jmp-4qpg-7fv3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences