CVE-2021-22292: Huawei ECNS280 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS.

Affected products

• Huawei ECNS280 Firmware: version v100r005c00 only; version v100r005c10 only

Published 2021-02-06. Last modified 2026-06-17.