Huawei eCNS280_TD Firmware V100R005C00

There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Due to the improperly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause the information leak.

Published: 2021-11-23T14:59:57.000Z
Updated: 2024-08-04T01:09:07.665Z

There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation.Affected product versions include:eCNS280_TD V100R005C00,V100R005C10;eSE620X vESS V100R001C10SPC200,V100R001C20SPC200.

Published: 2021-08-02T16:08:35.000Z
Updated: 2024-08-03T18:44:13.033Z

There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can be operated by another thread that is operating concurrently. Successful exploit may cause the affected device abnormal.

Published: 2021-06-22T18:32:08.000Z
Updated: 2024-08-03T18:44:13.582Z

There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods.

Published: 2021-02-06T00:38:25.000Z
Updated: 2024-08-03T18:37:18.511Z