CWE Code: 74
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary: the ibmc (intelligent baseboard management controller) of some huawei servers have a json injection vulnerability due to insufficient input validation. an authenticated, remote attacker can launch a json injection to modify the password of administrator. successful exploit may allow attackers to obtain the management privilege of the system.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-06-01
Last Modified Date: 2018-07-02