CVE-2021-39999

There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerability by sending a specific message to the target device due to insufficient validation of packets. Successful exploit could cause a denial of service condition...

PT-2021-22785

Name of the Vulnerable Software and Affected Versions eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200 DOPRA SSP products affected versions not specified Description The issue is related to a buffer overflow due to insufficient validation of packets. An attacker can exploit this ...

CVE-2021-39995

Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280TD V100R005C10; eSE620X vESS V100R001C10SPC200,...

CVE-2021-39995

Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280TD V100R005C10; eSE620X vESS V100R001C10SPC200,...

PT-2021-22784

Name of the Vulnerable Software and Affected Versions Huawei eCNS280 TD version V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300 Description The issue is related to an out-of-bounds read vulnerability in a function that parses data returned by...

CVE-2021-22396: Improper Privilege Management

There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation.Affected product versions include:eCNS280...

PT-2021-15023

Name of the Vulnerable Software and Affected Versions: Huawei eCNS280 TD versions V100R005C00 through V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200 Description: The issue is related to improper privilege management in some Huawei products, allowing a local...

CVE-2021-22366

There is an out-of-bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a function that handles an internal message contains an out-of-bounds read vulnerability. An attacker could crafted messages between system process,...

CVE-2021-22361: Undefined Security Weakness

There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is not authorized correctly. Attacker with low access may launch privilege escalation in a specific scenario. This may compromise the normal...

CVE-2021-22366: Out-of-bounds Read

There is an out-of-bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a function that handles an internal message contains an out-of-bounds read vulnerability. An attacker could crafted messages between system process,...

CVE-2021-22383: Out-of-bounds Read

There is an out-of-bounds read vulnerability in eCNS280TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a message-handling function that contains an out-of-bounds read vulnerability. An attacker can exploit this vulnerability by...

PT-2021-15012

Name of the Vulnerable Software and Affected Versions: eCNS280 TD version V100R005C10 eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200, V200R001C00SPC300 Description: The issue is caused by a message-handling function that contains an out-of-bounds read. An attacker can exploit...

Huawei ESE620X vESS buffer overflow vulnerability

Huawei ESE620X vESS is a virtual enterprise service controller from Huawei, China. A security vulnerability exists in ESE620X vESS, which is caused by an out-of-bounds read in a function that handles internal messages. An attacker could use this vulnerability to send a constructed exception messa...

PT-2021-14994

Name of the Vulnerable Software and Affected Versions: eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200, V200R001C00SPC300 Huawei products affected versions not specified Description: The issue is related to an out of bounds read vulnerability. A local attacker can exploit this b...

PT-2021-14995

Name of the Vulnerable Software and Affected Versions: eSE620X vESS versions V100R001C10SPC200 through V200R001C00SPC300 Description: The issue is caused by a function handling internal messages that contains an out-of-bounds read. An attacker could craft messages between system processes, and a...

PT-2021-14990

Name of the Vulnerable Software and Affected Versions: eCNS280 versions V100R005C00 through V100R005C10 eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200 Description: The issue is related to an improper authorization vulnerability. A file access is not authorized correctly, which...