There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods.
[
{
"product": "eCNS280_TD",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "V100R005C00"
},
{
"status": "affected",
"version": "V100R005C10"
}
]
}
]