CVE-2021-22396
First published: Mon Aug 02 2021(Updated: )
There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation.Affected product versions include:eCNS280_TD V100R005C00,V100R005C10;eSE620X vESS V100R001C10SPC200,V100R001C20SPC200.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Ecns280 Td Firmware | =v100r005c00 | |
| Huawei Ecns280 Td Firmware | =v100r005c10 | |
| Huawei Ecns280 Td | ||
| Huawei Ese620x Vess Firmware | =v100r001c10spc200 | |
| Huawei Ese620x Vess Firmware | =v100r001c20spc200 | |
| Huawei Ese620x Vess |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this privilege escalation vulnerability?
The vulnerability ID is CVE-2021-22396.
What is the severity rating of CVE-2021-22396?
The severity rating of CVE-2021-22396 is high.
Which Huawei products are affected by CVE-2021-22396?
The affected Huawei products include Huawei Ecns280 Td Firmware (v100r005c00 and v100r005c10) and Huawei Ese620x Vess Firmware (v100r001c10spc200 and v100r001c20spc200).
What does the privilege escalation vulnerability in CVE-2021-22396 allow?
The privilege escalation vulnerability allows a local attacker with common privilege to access specific files, resulting in privilege escalation.
Where can I find more information about CVE-2021-22396?
More information about CVE-2021-22396 can be found in the Huawei Security Advisory.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/tags
- agent/event
- agent/references
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei ecns280 td firmware
- version/huawei ecns280 td firmware/v100r005c00
- version/huawei ecns280 td firmware/v100r005c10
- canonical/huawei ecns280 td
- canonical/huawei ese620x vess firmware
- version/huawei ese620x vess firmware/v100r001c10spc200
- version/huawei ese620x vess firmware/v100r001c20spc200
- canonical/huawei ese620x vess