Read the docs
TI-2018-05748 Aliases CVE-2018-7942GHSA-87gh-g484-3wp7

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an…

Priority LOW 36Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.

Why it matters now

EPSS 0.01577 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Huawei1288H V5; 2288H V5; 2488 V5; CH121 V3; CH121L V3; CH121L V5; CH121 V5; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V31288H V5 V100R005C00; 2288H V5 V100R005C00; 2488 V5 V100R005C00; CH121 V3 V100R001C00; CH121L V3 V100R001C00; CH121L V5 V100R001C00; CH121 V5 V100R001C00; CH140 V3 V100R001C00; CH140L V3 V100R001C00; CH220 V3 V100R001C00; CH222 V3 V100R001C00; CH242 V3 V100R001C00; CH242 V5 V100R001C00; RH1288 V3 V100R003C00; RH2288 V3 V100R003C00; RH2288H V3 V100R003C00; XH310 V3 V100R003C00; XH321 V3 V100R003C00; XH321 V5 V100R005C00; XH620 V3 V100R003C00—No fix listedCNA
  • 1288H V5; 2288H V5; 2488 V5; CH121 V3; CH121L V3; CH121L V5; CH121 V5; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3 VendorHuawei Affected 1288H V5 V100R005C00; 2288H V5 V100R005C00; 2488 V5 V100R005C00; CH121 V3 V100R001C00; CH121L V3 V100R001C00; CH121L V5 V100R001C00; CH121 V5 V100R001C00; CH140 V3 V100R001C00; CH140L V3 V100R001C00; CH220 V3 V100R001C00; CH222 V3 V100R001C00; CH242 V3 V100R001C00; CH242 V5 V100R001C00; RH1288 V3 V100R003C00; RH2288 V3 V100R003C00; RH2288H V3 V100R003C00; XH310 V3 V100R003C00; XH321 V3 V100R003C00; XH321 V5 V100R005C00; XH620 V3 V100R003C00 Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:o:huawei:1288h_v5_firmware:100r005c00:*:*:*:*:*:*:*100r005c00VulnerableHuawei
cpe:2.3:h:huawei:1288h_v5:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:2288h_v5_firmware:100r005c00:*:*:*:*:*:*:*100r005c00VulnerableHuawei
cpe:2.3:h:huawei:2288h_v5:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:2488_v5_firmware:100r005c00:*:*:*:*:*:*:*100r005c00VulnerableHuawei
cpe:2.3:h:huawei:2488_v5:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ch242_v3_firmware:100r001c00:*:*:*:*:*:*:*100r001c00VulnerableHuawei
cpe:2.3:h:huawei:ch242_v3:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ch121l_v3_firmware:100r001c00:*:*:*:*:*:*:*100r001c00VulnerableHuawei
cpe:2.3:h:huawei:ch121l_v3:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:1288h_v5_firmware:100r005c00:*:*:*:*:*:*:* Versions 100r005c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:1288h_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:2288h_v5_firmware:100r005c00:*:*:*:*:*:*:* Versions 100r005c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:2288h_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:2488_v5_firmware:100r005c00:*:*:*:*:*:*:* Versions 100r005c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:2488_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ch242_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ch242_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ch121l_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ch121l_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:huawei:ch121l_v5_firmware:100r001c00:*:*:*:*:*:*:*100r001c00VulnerableHuawei
cpe:2.3:h:huawei:ch121l_v5:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ch121_v3_firmware:100r001c00:*:*:*:*:*:*:*100r001c00VulnerableHuawei
cpe:2.3:h:huawei:ch121_v3:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:ch121l_v5_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ch121l_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ch121_v3_firmware:100r001c00:*:*:*:*:*:*:* Versions 100r001c00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ch121_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-7942
  2. 2026-10-03 Alias added: GHSA-87gh-g484-3wp7

References

Other 1

  • TI-2018-05755 Code injection in Huawei 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5… CVSS 3.0HIGH 8.8
  • TI-2018-05754 Code injection in Huawei 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5… CVSS 3.0HIGH 8.8
  • TI-2018-05749 Improper authentication in Huawei 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3… CVSS 3.0HIGH 8.8
  • TI-2018-05753 Improper authentication in Huawei 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3… CVSS 3.0HIGH 8.8
  • TI-2018-05722 Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection… CVSS 3.0HIGH 8.8
  • TI-2018-05721 Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection… CVSS 3.0HIGH 8.8
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences