CVE-2021-40007

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with the ability to access the log file of device may lead to information disclosure.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-116

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-400087.5There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C0CVE-2021-400095.3There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect serCVE-2021-40014.1A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kerneCVE-2021-400109.8The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.CVE-2021-400117.5There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect CVE-2021-400127.5Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerabilCVE-2021-400136.5Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.CVE-2021-400147.5The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data CVE-2021-400154.7There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affecCVE-2021-400166.5Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.CVE-2021-400179.8The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-boundCVE-2021-400187.5The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-40007: Medium severity, CVSS 6.5 | Vulnix