Ecns280 Td Firmware (Huawei) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2021-12-13. Vendor: Huawei.

CVEs of Ecns280 Td Firmware

• CVE-2021-40007 - CVSS 6.5 (medium), 2021-12-13: There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with…
• CVE-2021-39995 - CVSS 6.5 (medium), 2021-11-29: Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read…
• CVE-2021-37036 - CVSS 5.5 (medium), 2021-11-23: There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Due to the improperly storage of specific…
• CVE-2021-22396 - CVSS 7.8 (high), 2021-08-02: There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access…
• CVE-2021-22383 - CVSS 4.9 (medium), 2021-06-22: There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The…
• CVE-2021-22378 - CVSS 5.3 (medium), 2021-06-22: There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can be operated by…
• CVE-2021-22363 - CVSS 7.5 (high), 2021-06-22: There is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650. An attacker needs to perform specific operations to exploit the…
• CVE-2021-22300 - CVSS 4.1 (medium), 2021-02-06: There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file…