CVE-2018-7950

The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.

• CWE-94

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-02-server-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-02-server-enVendor Advisory

Published

Jun 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7944Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C…
• CVE-2018-7945Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7946There is an information leak vulnerability in some Huawei sm…
• CVE-2018-7947Huawei mobile phones with versions earlier before Emily-AL00…
• CVE-2018-7948Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7949The iBMC (Intelligent Baseboard Management Controller) of so…
• CVE-2018-7951The iBMC (Intelligent Baseboard Management Controller) of so…
• CVE-2018-7955Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7956Huawei VIP App is a mobile app for Malaysia customers that p…
• CVE-2018-7957Huawei smartphones with software Victoria-AL00 8.0.0.336a(C0…
• CVE-2018-7958There is an anonymous TLS cipher suites supported vulnerabil…
• CVE-2018-7959There is a short key vulnerability in Huawei eSpace product.…