CVE-2017-8122

CRITICAL

Huawei UMA V200R001 - Privilege Escalation via Improper Parameter Validation

Title source: llm
STIX 2.1

Description

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/101961

Scores

CVSS v3 9.8
EPSS 0.0026
EPSS Percentile 49.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (2)
huawei/uma v200r001
Huawei Technologies Co., Ltd./UMA V200R001
Published Nov 22, 2017
Tracked Since Feb 18, 2026