CVE-2021-22300

MediumCVSS 4.1/10Last modified Jun 17, 2026

Description

There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods.

Metrics

CVSS 3.1 4.1/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

Vendor	Product	Versions
n/a	eCNS280_TD	V100R005C00; V100R005C10

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-cgp-enVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-cgp-enVendor Advisory

Timeline

Published: Feb 6, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-223016.7Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulne CVE-2021-223027.1There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can expl CVE-2021-223033.3There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function CVE-2021-223043.3There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while CVE-2021-223053.3There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messa CVE-2021-223064.6There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with me CVE-2021-223075.5There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be pro CVE-2021-223083.3There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots CVE-2021-223097.5There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit t CVE-2021-22318.1Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 1 CVE-2021-223104.4There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, CVE-2021-223117.2There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can ru