CVE-2021-39995

Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280TD V100R005C10; eSE620X vESS V100R001C10SPC200,...

PT-2021-22784

Name of the Vulnerable Software and Affected Versions Huawei eCNS280 TD version V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300 Description The issue is related to an out-of-bounds read vulnerability in a function that parses data returned by...

Huawei eCNS280 XML External Object DoS

The vulnerability of the microprogramming software in Huawei’s basic network system eCNS280 is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause a failure in the module’s operation...

Huawei eCNS280_TD: Permissions and access control issues

Huawei eCNS280TD is a core network device for the wireless broadband trunking system from Huawei China. Huawei ESE620X vESS is a virtual enterprise service controller from Huawei China. An elevation of privilege vulnerability exists in several Huawei products. The vulnerability stems from the fac...

PT-2021-15023

Name of the Vulnerable Software and Affected Versions: Huawei eCNS280 TD versions V100R005C00 through V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200 Description: The issue is related to improper privilege management in some Huawei products, allowing a local...

Huawei eCNS280_TD: Competition condition issue vulnerability

Huawei eCNS280TD is a core network device for the wireless broadband trunking system from Huawei China. Huawei eCNS280TD is vulnerable to a competitive condition that could be exploited by an attacker to cause anomalies in affected devices...

Huawei eCNS280 Resource Management Error Vulnerability

Huawei eCNS280 is the core network equipment of Huawei's wireless broadband trunking system. In addition to providing the network functions of a traditional core network, it also virtualizes the functions of network elements and shares standardized hardware resources among multiple network elemen...

Huawei eCNS280 Resource Management Error Vulnerability

Huawei eCNS280 is the core network equipment of Huawei's wireless broadband trunking system. In addition to providing the network functions of a traditional core network, it also virtualizes the functions of network elements and shares standardized hardware resources among multiple network elemen...

Huawei eCNS280 Information Disclosure Vulnerability

Huawei eCNS280 is the core network equipment of Huawei's wireless broadband trunking system. In addition to providing the network functions of a traditional core network, it also virtualizes the functions of network elements and shares standardized hardware resources among multiple network elemen...