CVE-2021-22396

Name of the Vulnerable Software and Affected Versions: Huawei eCNS280 TD versions V100R005C00 through V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200

Description: The issue is related to improper privilege management in some Huawei products, allowing a local attacker with common privilege to access specific files, which can lead to privilege escalation.

Recommendations: For Huawei eCNS280 TD versions V100R005C00 through V100R005C10, update to a version that properly manages privileges to prevent unauthorized access. For Huawei eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200, restrict access to sensitive files until a patch is available that corrects the privilege management issue. As a temporary workaround, consider limiting local access to the affected products to minimize the risk of exploitation.