Huawei CH140L V3 Firmware 100R001C00
Approved changes feed: RSS · Atom
cpe:2.3:o:huawei:ch140l_v3_firmware:100r001c00:*:*:*:*:*:*:*
part: o version: 100r001c00 update: *
| Vendor | Huawei (1cc7ae8f-602e-5c48-b475-b8c42c69e952) |
|---|---|
| Product | Ch140L V3 Firmware (c63867a2-3b19-5306-a76e-44467244932c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-7951 |
vulnerable | 2026-06-08 05:12:04.853823 |
Details available
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-08-05T06:37:59.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7950 |
vulnerable | 2026-06-08 05:12:04.851331 |
Details available
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-08-05T06:37:59.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7949 |
vulnerable | 2026-06-08 05:12:04.849251 |
Details available
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users to get or modify passwords of highly privileged users.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-08-05T06:37:59.717Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7941 |
vulnerable | 2026-06-08 05:12:04.801011 |
Details available
Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation.
Published: 2018-05-10T14:00:00.000Z
Updated: 2024-08-05T06:37:59.759Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.