Vulnerabilities

TI-2017-05705 CVE-2017-8130 · GHSA-34p4-pf9q-p32p

Information disclosure in Huawei UMA

LOW 30

The UMA product with software V200R001 and V300R001 has an information leak vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00732 Published 2017-11-22 No fix listed CWE-200

TI-2017-05704 CVE-2017-8129 · GHSA-382h-3vwf-5x2j

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05703 CVE-2017-8128 · GHSA-h469-5354-xh9r

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05702 CVE-2017-8127 · GHSA-mmv9-w55c-wx5c

Cross-site scripting in Huawei UMA

LOW 28

The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00545 Published 2017-11-22 No fix listed CWE-79

TI-2017-05701 CVE-2017-8126 · GHSA-4q96-97v6-xq9v

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05700 CVE-2017-8125 · GHSA-vm7v-j34j-7x3q

Cross-site scripting in Huawei UMA

LOW 28

The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00545 Published 2017-11-22 No fix listed CWE-79

TI-2017-05699 CVE-2017-8124 · GHSA-8ww7-558h-f84p

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05698 CVE-2017-8123 · GHSA-9j86-9cgr-74r4

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05697 CVE-2017-8122 · GHSA-75c3-x5gg-g283

Improper input validation in Huawei UMA

MEDIUM 45

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01345 Published 2017-11-22 No fix listed CWE-20

TI-2017-05696 CVE-2017-8121 · GHSA-42mr-7g8f-rcxc

Information disclosure in Huawei UMA

LOW 25

The UMA product with software V200R001 and V300R001 has an information leak vulnerability.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00749 Published 2017-11-22 No fix listed CWE-200

TI-2017-05695 CVE-2017-8120 · GHSA-3fq4-qf4h-j7fg

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05694 CVE-2017-8119 · GHSA-v659-hwgr-274g

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05693 CVE-2017-8118 · GHSA-6c89-7p97-7956

Information disclosure in Huawei UMA

LOW 12

The UMA product with software V200R001 and V300R001 has an information leak vulnerability.

CVSS 3.0LOW 2.3 Local High privileges No interaction EPSS 0.0023 Published 2017-11-22 No fix listed CWE-200

TI-2017-05692 CVE-2017-8117 · GHSA-w54p-4v2h-pg5m

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01106 Published 2017-11-22 No fix listed CWE-20

TI-2016-06111 CVE-2016-7110 · GHSA-cpcv-4q8j-mrgm

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers…

MEDIUM 47

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7109.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0271 Published 2016-09-07 No fix listed CWE-94

TI-2016-06110 CVE-2016-7109 · GHSA-qc83-7v7m-hrrc

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers…

MEDIUM 48

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7110.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03536 Published 2016-09-07 No fix listed CWE-94

TI-2016-06109 CVE-2016-7108 · GHSA-m74m-xhqj-whgq

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote…

LOW 31

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01129 Published 2016-09-07 No fix listed CWE-200

TI-2016-06108 CVE-2016-7107 · GHSA-v5fv-jp8m-f4g2

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote…

LOW 35

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01205 Published 2016-09-07 No fix listed CWE-284

Vulnerabilities

Filters