CVE-2017-8119

Description

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Affected products

• Huawei Technologies Co., Ltd. / UMAV200R001 and V300R001 – V200R001 and V300R001

References

• VENDOR_ADVISORYhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en