Back to Database
Status published
Critical
CVE-2017-8129
The UMA product with software V200R001 and V300R001 has a...
Vulnerability Description
The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-8129
Credits & Attribution
No credits recorded in the NVD database.
More from Huawei Technologies Co., Ltd.
View All →CVE-2018-7994
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10;...
High
7.5
CVE-2018-7993
HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311...
High
7.8
CVE-2018-7992
Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro...
Medium
5.5
CVE-2018-7991
Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have...
Medium
4.6
CVE-2018-7990
Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00)...
Medium
4.6
Affected Vendor
Huawei Technologies Co., Ltd.
View all reports →Affected Software
UMA
Vulnerable Versions:
V200R001 and V300R001
Timeline
Official Publish:
November 22nd, 2017
Last Modified:
September 17th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.