What is the CVSS score of CVE-2018-7942?

CVE-2018-7942 has a CVSS 3.0 base score of 7.5 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.6%.

Ch121 V3 Firmware CVE-2018-7942

HIGH

2018-05-24 psirt@huawei.com

Authentication Bypass Huawei Ch121 V3 Firmware Ch121L V3 Firmware Ch242 V3 Firmware Ch121L V5 Firmware 1288H V5 Firmware 2288H V5 Firmware 2488 V5 Firmware

7.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

May 24, 2018 - 14:29 nvd

HIGH 7.5

DescriptionNVD

AnalysisAI

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak. Affected products include: Huawei 1288H V5 Firmware, Huawei 2288H V5 Firmware, Huawei 2488 V5 Firmware, Huawei Ch242 V3 Firmware, Huawei Ch121L V3 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.