Vulnerability · Published Feb 6, 2021 · Assigned by huawei
CVE-2021-22300
Medium 4.1
In plain English
A medium-severity security flaw in eCNS280_TD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS NVD)4.1Medium
Exploit odds (30 days)0.1%top 95.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | eCNS280_TD | V100R005C00V100R005C10 |
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-cgp-en x_refsource_CONFIRM