CVE-2017-8128

CRITICAL

Huawei UMA V200R001 and V300R001 - Privilege Escalation via Improper Parameter Validation

Title source: llm
STIX 2.1

Description

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0022
EPSS Percentile 44.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (3)
huawei/uma v200r001
huawei/uma v300r001
Huawei Technologies Co., Ltd./UMA V200R001 and V300R001
Published Nov 22, 2017
Tracked Since Feb 18, 2026