CVE-2021-22361: Huawei ECNS280 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is not authorized correctly. Attacker with low access may launch privilege escalation in a specific scenario. This may compromise the normal service.

Affected products

• Huawei ECNS280 Firmware: version v100r005c00 only; version v100r005c10 only
• Huawei ESE620X Vess Firmware: version v100r001c10spc200 only; version v100r001c20spc200 only

Published 2021-06-22. Last modified 2026-06-17.