CVE-2017-8128

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Score

CVSS 3.0 9.8 Critical

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Uma (Huawei)
• Uma (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en