Huawei Ese620x Vess Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Huawei Ese620x Vess Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-22361 — CVSS 7.8 (high): There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200…
• CVE-2021-22396 — CVSS 7.8 (high): There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common…
• CVE-2021-39999 — CVSS 7.5 (high): There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this…
• CVE-2021-39995 — CVSS 6.5 (medium): Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an…
• CVE-2021-22366 — CVSS 5.5 (medium): There is an out-of-bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is…
• CVE-2021-22383 — CVSS 4.9 (medium): There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200…
• CVE-2021-22365 — CVSS 3.3 (low): There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can…