Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Filtered by product Ese620x Vess Firmware
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-39999 1 Huawei 2 Ese620x Vess, Ese620x Vess Firmware 2022-07-15 7.8 HIGH 7.5 HIGH
There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerability by sending a specific message to the target device due to insufficient validation of packets. Successful exploit could cause a denial of service condition.
CVE-2021-22361 1 Huawei 4 Ecns280, Ecns280 Firmware, Ese620x Vess and 1 more 2022-05-03 4.6 MEDIUM 7.8 HIGH
There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is not authorized correctly. Attacker with low access may launch privilege escalation in a specific scenario. This may compromise the normal service.
CVE-2021-22396 1 Huawei 4 Ecns280 Td, Ecns280 Td Firmware, Ese620x Vess and 1 more 2021-08-11 4.6 MEDIUM 7.8 HIGH
There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation.Affected product versions include:eCNS280_TD V100R005C00,V100R005C10;eSE620X vESS V100R001C10SPC200,V100R001C20SPC200.