There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ecns280_td_firmware | Huawei | v100r005c00 (including) | v100r005c00 (including) |
| Ecns280_td_firmware | Huawei | v100r005c10 (including) | v100r005c10 (including) |