Out-of-bounds Read Vulnerability in Huawei eCNS and eSE620X Products
CVE-2021-22383
4.9MEDIUM
Summary
An out-of-bounds read vulnerability exists in Huawei's eCNS280_TD and eSE620X series products. The issue arises from a flaw in the message-handling function, allowing an attacker to exploit the vulnerability by sending crafted messages. This could potentially result in a denial-of-service condition, impacting the availability of the affected devices.
Affected Version(s)
eCNS280_TD;eSE620X vESS V100R005C10
eCNS280_TD;eSE620X vESS V100R001C10SPC200,V100R001C20SPC200,V200R001C00SPC300
References
CVSS V3.1
Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved