Huawei ESE620X Vess Firmware vulnerabilities

7 CVEs affecting Huawei ESE620X Vess Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-39999, published 2022-07-12.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-39999, published 2022-07-12. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerability by sending a specific message to the target device due to…
• CVE-2021-22383, published 2021-06-22. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a message-handling…
• CVE-2021-39995, published 2021-11-29. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of…
• CVE-2021-22361, published 2021-06-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is not authorized correctly. Attacker with…
• CVE-2021-22366, published 2021-06-22. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. There is an out-of-bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a function that handles an internal message contains…
• CVE-2021-22365, published 2021-06-22. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnerability by sending specific message to…
• CVE-2021-22396, published 2021-08-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected…