Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Huawei Component: Ecns280 Td Firmware Clear all filters
TI-2021-17219 CVE-2021-40007 · GHSA-qwj7-chm6-2f8f

Improper output encoding in eCNS280_TD

Priority LOW 30

There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00565 Published 2021-12-13 No fix listed CWE-116
TI-2021-17207 CVE-2021-39995 · GHSA-mjvc-frcm-6323

Out-of-bounds read in eCNS280_TD;eSE620X vESS

Priority LOW 30

Some Huawei products use the OpenHpi software for hardware management.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00591 Published 2021-11-29 No fix listed CWE-125
TI-2021-05356 CVE-2021-22383 · GHSA-6cwc-pxwm-p422

Out-of-bounds read in eCNS280_TD;eSE620X vESS

Priority LOW 23

There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00599 Published 2021-06-22 No fix listed CWE-125
TI-2021-05336 CVE-2021-22363 · GHSA-f4h5-fx46-qjxf

Resource allocation without limits in eCNS280_TD

Priority LOW 34

There is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00677 Published 2021-06-22 No fix listed CWE-770
TI-2021-05351 CVE-2021-22378 · GHSA-q93v-chpc-2r2m

Race condition in eCNS280_TD

Priority LOW 24

There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00398 Published 2021-06-22 No fix listed CWE-362