CVE-2021-22338

There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input XML message. Attacker can send specific message to exploit this vulnerability, leading to the module denial of service...

CVE-2021-22338

The CVE-2021-22338 entry concerns an XXE injection in Huawei eCNS280, specifically versions V100R005C00 and V100R005C10. The underlying issue is that a module does not strictly validate input XML, allowing an attacker to craft messages that trigger denial of service. Public details in connected d...

Security Advisory - XXE Injection Vulnerability in Huawei Products

There is an XXE injection vulnerability in some Huawei products. A module does not perform the strict operation to the input XML message. Attacker can send specific message to exploit this vulnerability, leading to the module denial of service. Vulnerability ID: HWPSIRT-2020-04355 This...