CVE-2017-8129 The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packet...
CriticalCVSS 9.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei uma | = v200r001 | No fix listed |
| Huawei uma | = v300r001 | No fix listed |
| Huawei Technologies Co., Ltd. UMA | = V200R001 and V300R001 | No fix listed |
References
- www.huawei.com vendor-advisory