Huawei Ecns280 Td Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Huawei Ecns280 Td Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2021-22396 — CVSS 7.8 (high): There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common…
• CVE-2021-22363 — CVSS 7.5 (high): There is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650. An attacker needs to perform specific operations to…
• CVE-2021-40007 — CVSS 6.5 (medium): There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log output management…
• CVE-2021-39995 — CVSS 6.5 (medium): Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an…
• CVE-2021-37036 — CVSS 5.5 (medium): There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Due to the improperly storage…
• CVE-2021-22378 — CVSS 5.3 (medium): There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in which the database…
• CVE-2021-22383 — CVSS 4.9 (medium): There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200…
• CVE-2021-22300 — CVSS 4.1 (medium): There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit…