CVE-2021-22292
HIGHHuawei eCNS280 V100R005C00 V100R005C10 - Unauthenticated Denial of Service via Message Flood
Title source: llmDescription
There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-02-dos-en
Scores
CVSS v3
7.5
EPSS
0.0017
EPSS Percentile
38.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (2)
huawei/ecns280_firmware
v100r005c00
huawei/ecns280_firmware
v100r005c10
Published
Feb 06, 2021
Tracked Since
Feb 18, 2026