PT-2017-18136 · Huawei · Uma

Publicado 2017-11-22 · Atualizado 2017-12-08 · CVE-2017-8127

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions UMA product version V200R001

Description The issue is related to a cross-site scripting (XSS) vulnerability caused by insufficient input validation. This allows an attacker to craft malicious links or scripts to launch XSS attacks.

Recommendations For UMA product version V200R001, consider implementing proper input validation to prevent malicious scripts from being executed. As a temporary workaround, restrict user input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-8127

Produtos afetados

Uma

Referências · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8127 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8127 · Nota de Segurança