CVE-2017-8128

Description

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.224

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities affected in uma v200r001	NCM
Vulnerabilities CVE-2017-8128 ,CVE-2017-8129 ,CVE-2017-8130 are affected in uma v300r001	NCM
Improper Input Validation Vulnerability (CVE-2017-8128)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234