Huawei Tecal E9000 chassis IPMICommand Privilege Escalation Vulnerability

Huawei Tecal E9000 chassis IPMICommand Privilege Escalation Vulnerability

Release date:
Updated on:

Affected Systems:
Huawei Tecal E9000
Description:
Bugtraq id: 71786

Huawei Tecal E9000 is a blade server device. It adopts a 12 U/16-piece structure and is fully redundant and modular in power supply, heat dissipation, management, and switching.

The Huawei Tecal E9000 has a permission Escalation Vulnerability in IPMICommand implementation. Attackers can exploit this vulnerability to bypass certain security restrictions and escalate permissions on affected systems.

<* Source: vendor

Link: http://secunia.com/advisories/61508/
*>

Suggestion:
Vendor patch:

Huawei
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-408100.htm

This article permanently updates the link address: