CVE-2017-8124

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Nov 22, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-81256.1The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An CVE-2017-81269.8The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of paraCVE-2017-81276.1The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker coulCVE-2017-81289.8The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proceCVE-2017-81299.8The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proceCVE-2017-81306.5The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some senCVE-2017-81318.8The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input valCVE-2017-81328.8The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input valCVE-2017-81338.8Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker coCVE-2017-81348.8The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input valCVE-2017-81358.8The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input valCVE-2017-81365.5HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary fil
CVE-2017-8124: Critical severity, CVSS 9.8 | Vulnix