Low severity · published Nov 22, 2017
CVE-2017-8118
The UMA product with software V200R001 and V300R001 has an information leak vulnerability
2.3
CVSS
0.2%
EPSS
No
On KEV
Description
The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UM
Uma · Huawei
v200r001; v300r001 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-8118
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-8118
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en
More from Uma
9.8
CVE-2017-8129
The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters
9.8
CVE-2017-8128
The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters
9.8
CVE-2017-8126
The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters
9.8
CVE-2017-8124
The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters
9.8
CVE-2017-8123
The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters