There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is not authorized correctly. Attacker with low access may launch privilege escalation in a specific scenario. This may compromise the normal service.
[
{
"product": "eCNS280;eSE620X vESS",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "V100R005C00,V100R005C10"
},
{
"status": "affected",
"version": "V100R001C10SPC200,V100R001C20SPC200"
}
]
}
]