VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 22, 2021· Updated Jun 17, 2026

CVE-2021-22361

CVE-2021-22361

Description

There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is not authorized correctly. Attacker with low access may launch privilege escalation in a specific scenario. This may compromise the normal service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Huawei/Ecns280 Firmware2 versions
    cpe:2.3:o:huawei:ecns280_firmware:v100r005c00:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:huawei:ecns280_firmware:v100r005c00:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:ecns280_firmware:v100r005c10:*:*:*:*:*:*:*
  • Huawei/Ese620x Vess Firmware2 versions
    cpe:2.3:o:huawei:ese620x_vess_firmware:v100r001c10spc200:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:huawei:ese620x_vess_firmware:v100r001c10spc200:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:ese620x_vess_firmware:v100r001c20spc200:*:*:*:*:*:*:*
  • Huawei/eCNS280description
  • Huawei/eCNS280_TDllm-create
    Range: V100R005C00
  • Huawei/eSE620X vESSllm-fuzzy
    Range: V100R001C10SPC200

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.