Race Condition Vulnerability in eCNS280_TD by Huawei

CVE-2021-22378

What is CVE-2021-22378?

The eCNS280_TD product from Huawei is susceptible to a race condition vulnerability that can occur during concurrent database operations. This vulnerability arises from a timing window where a secondary thread may gain access to the database while it is being manipulated, potentially leading to abnormal behavior of the device. If successfully exploited, this may disrupt normal operations, impacting the reliability of services dependent on the affected versions.

References