CVE-2017-8119

Critical

Published: 22/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The UMA product with software versions V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Risk Assessment

This vulnerability could lead to unauthorized access to the system, posing a serious security threat to the organization. Attackers may gain control over the system and perform unauthorized operations.

Recommendation

It is recommended to update the software to the latest version that addresses this vulnerability. Additionally, implementing further parameter validation mechanisms in the application is advisable.

Original NVD description (English source)

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.