cbcvebase.
CVE-2021-22361
published 2021-06-22

CVE-2021-22361: There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is not authorized correctly. Attacker with low access may launch privilege escalation in a specific scenario. This may compromise the normal service.

Affected

4 ranges
VendorProductVersion rangeFixed in
huaweiecns280_firmware——
huaweiecns280_firmware——
huaweiese620x_vess_firmware——
huaweiese620x_vess_firmware——