CVE-2017-8130

CWE-200 — Information Exposure3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 66.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Technologies Co., Ltd. UMAHuawei UMA
Timeline
PublishedNov 22
Latest updateMay 17

Description

The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/umav200r001, v300r001+1
▶CVEListV5huawei_technologies_co.,_ltd./umaV200R001 and V300R001

🔴Vulnerability Details

2
GHSA
GHSA-34p4-pf9q-p32p: The UMA product with software V200R001 and V300R001 has an information leak vulnerability↗2022-05-17
▶
CVEList
CVE-2017-8130: The UMA product with software V200R001 and V300R001 has an information leak vulnerability↗2017-11-22
▶
CVE-2017-8130 (MEDIUM CVSS 6.5) | The UMA product with software V200R | cvebase.io