Elevation of privilege vulnerabilities in multiple Huawei products

Huawei eCNS280_TD is a core network device for the wireless broadband trunking system from Huawei (China). Huawei ESE620X vESS is a virtual enterprise service controller from Huawei (China). An elevation of privilege vulnerability exists in several Huawei products. The vulnerability stems from the fact that the product does not properly impose security restrictions and could be exploited by a local attacker to access certain specific files in the affected product.