2021-02-06 - CVE Archive

CVE-2021-22299 Feb 06, 02:15 HIGH This Week

There is a local privilege escalation vulnerability in some Huawei products. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Huawei Smc2 0 Firmware Manageone Imaster Mae M +1

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2021-22293 Feb 06, 03:15 HIGH This Week

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Request Smuggling Huawei Manageone Campusinsight +1

NVD

CVSS 3.1

7.5

EPSS

0.9%

CVE-2021-22292 Feb 06, 03:15 HIGH This Week

There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Huawei Ecns280 Firmware

NVD

CVSS 3.1

7.5

EPSS

0.9%

CVE-2021-22302 Feb 06, 03:15 HIGH This Week

There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Huawei Taurus Al00A Firmware

NVD

CVSS 3.1

7.1

EPSS

0.2%