Vulnerability Details CVE-2021-22292
There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.8
References
Products affected by CVE-2021-22292
-
cpe:2.3:h:huawei:ecns280:-
-
cpe:2.3:o:huawei:ecns280_firmware:v100r005c00
-
cpe:2.3:o:huawei:ecns280_firmware:v100r005c10