CVE-2018-7951

CVE-2018-7951 describes a JSON injection vulnerability in the iBMC (Intelligent Baseboard Management Controller) of certain Huawei servers. This flaw stems from insufficient input validation, allowing an authenticated, remote attacker to manipulate JSON data. Successful exploitation could lead to an attacker modifying the administrator password, thereby gaining full management privileges over the system. The vulnerability is rated as High severity (CVSS 8.8), indicating a network-based attack with low attack complexity and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.