Overview
- Description
- Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.
- Source
- psirt@huawei.com
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 1.4
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-863
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ibmc_firmware:v200r002c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99103586-1B75-414F-836B-BEFB99F0E2F6"
},
{
"criteria": "cpe:2.3:o:huawei:ibmc_firmware:v200r002c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D45CCA3-AF5E-4176-881D-3DFFC7EF7138"
},
{
"criteria": "cpe:2.3:o:huawei:ibmc_firmware:v200r002c30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFC7A4CF-20AF-4A2B-8B83-0FF661479F5D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ibmc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3D24EE92-DD14-4263-9E90-A6546F7603BB"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]