PT-2017-18136 · Huawei · Uma

Published 2017-11-22 · Updated 2017-12-08 · CVE-2017-8127

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions UMA product version V200R001

Description The issue is related to a cross-site scripting (XSS) vulnerability caused by insufficient input validation. This allows an attacker to craft malicious links or scripts to launch XSS attacks.

Recommendations For UMA product version V200R001, consider implementing proper input validation to prevent malicious scripts from being executed. As a temporary workaround, restrict user input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-8127

Affected Products

Uma

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8127 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8127 · Security Note