CVE:CVE-2018-7949
CNNVD:CNNVD-201806-140
Huawei 1288H V5等都是中国华为（Huawei）公司的不同型号的服务器设备。Intelligent Baseboard Management Controller（iBMC）是其中的一套嵌入式服务器智能管理系统。
多款Huawei产品中的iBMC存在提权漏洞。远程攻击者可通过向受影响设备发送特制的的登录消息利用该漏洞获取或修改高权限用户密码。以下产品和版本受到影响：Huawei 1288H V5 V100R005C00版本；2288H V5 V100R005C00版本；2488 V5 V100R005C00版本；CH121 V3 V100R001C00版本；CH121L V3 V100R001C00版本；CH121L V5 V100R001C00版本；CH121 V5 V100R001C00版本；CH140 V3 V100R001C00版本；CH140L V3 V100R001C00版本；CH220 V3 V100R001C00版本；CH222 V3 V100R001C00版本；CH242 V3 V100R001C00版本；CH242 V5 V100R001C00版本；RH1288 V3 V100R003C00版本；RH2288 V3 V100R003C00版本；RH2288H V3 V100R003C00版本；XH310 V3 V100R003C00版本；XH321 V3 V100R003C00版本；XH321 V5 V100R005C00版本；XH620 V3 V100R003C00版本。
solution:Upgrade huawei 1288h_v5_firmware to a higher version than 100r005c00,and avoid the version 100r005c00; Upgrade huawei 2288h_v5_firmware to a higher version than 100r005c00,and avoid the version 100r005c00; Upgrade huawei 2488_v5_firmware to a higher version than 100r005c00,and avoid the version 100r005c00; Upgrade huawei ch121_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch121l_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch121l_v5_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch121_v5_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch140_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch140l_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch220_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch222_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch242_v3_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei ch242_v5_firmware to a higher version than 100r001c00,and avoid the version 100r001c00; Upgrade huawei rh1288_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei rh2288_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei xh310_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei xh321_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei xh321_v5_firmware to a higher version than 100r005c00,and avoid the version 100r005c00; Upgrade huawei rh2288h_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00; Upgrade huawei xh620_v3_firmware to a higher version than 100r003c00,and avoid the version 100r003c00