CVE-2021-22365: Huawei ESE620X Vess Firmware

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of internal message, successful exploit may cause the process and the service abnormal.

Affected products

• Huawei ESE620X Vess Firmware: version v100r001c10spc200 only; version v100r001c20spc200 only; version v200r001c00spc300 only

Published 2021-06-22. Last modified 2026-06-17.