CVE-2021-37036: Huawei ECNS280 Td Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Due to the improperly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause the information leak.

Affected products

• Huawei ECNS280 Td Firmware: version v100r005c00 only; version v100r005c10 only
• Huawei Fusioncompute: version 6.5.1 only

Published 2021-11-23. Last modified 2026-06-17.