CVE-2021-22338

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input XML message. Attacker can send specific message to exploit this vulnerability, leading to the module denial of service.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published
Jun 29, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-223396.5There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of theCVE-2021-22345.3Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. CVE-2021-223404.1There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threCVE-2021-223414.9There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege caCVE-2021-223424.9There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attacCVE-2021-223439.1There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service integriCVE-2021-223445.3There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause temporary DoCVE-2021-223459.8There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause out-of-bounds memCVE-2021-223465.3There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to theCVE-2021-223475.3There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause temporary DoCVE-2021-223489.8There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may causCVE-2021-223497.5There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verification may cause the
CVE-2021-22338: Medium severity, CVSS 5.3 | Vulnix