CVE:CVE-2018-7941
CNNVD:CNNVD-201805-342
Huawei iBMC是中国华为（Huawei）公司开发的一套服务器嵌入式智能管理系统。该系统具有远程运维、故障诊断、智能化管理和标准化接口管理等功能。
Huawei iBMC V200R002C60版本中存在身份验证绕过漏洞，该漏洞源于程序没有正确的校验上传权限。攻击者可通过构造特制的消息向受影响的产品上传认证凭证利用该漏洞提升权限。
solution:Upgrade huawei ch121_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch121l_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch140_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch140l_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch220_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch222_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch242_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei rh1288_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei rh2288_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei rh2288h_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei xh310_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei xh321_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei xh620_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei ch121_v5_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch121l_v5_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch242_v5_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei 1288h_v5_firmware to a higher version than 100r005c00,and avoid the version 100r005c00; Upgrade huawei 2288h_v5_firmware to a higher version than 100r005c00,and avoid the version 100r005c00; Upgrade huawei 2488_v5_firmware to a higher version than 100r005c00,and avoid the version 100r005c00; Upgrade huawei xh321_v5_firmware to a higher version than 100r005c00,and avoid the version 100r005c00