What is CVE-2021-22363?

CVE-2021-22363 is a high-severity vulnerability in Huawei Ecns280_td, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2021-06-22.

How severe is CVE-2021-22363?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Huawei Ecns280_td

CVE-2021-22363

There is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650. An attacker needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the function…

EPSS: 0.007 (47.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Huawei Ecns280_td
Huawei Ecns280_td_firmware — versions v100r005c10spc650
N/a Ecns280_td — versions V100R005C10SPC650

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-22363?: CVE-2021-22363 is a high-severity vulnerability in Huawei Ecns280_td, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2021-06-22.
How severe is CVE-2021-22363?: High severity. CVSS v3 base score is 7.5 out of 10.