Information disclosure

2021-02-0601:15:00

PRIOn knowledge base

www.prio-n.com

4.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods.

CPENameOperatorVersion
ecns280_td_firmwareeq100r5c0-v
ecns280_td_firmwareeq100r5c10-v

CPE	Name	Operator	Version
	ecns280_td_firmware	eq	100r5c0-v
	ecns280_td_firmware	eq	100r5c10-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-cgp-en