Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280_TD V100R005C10; eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300.
[
{
"product": "eCNS280_TD;eSE620X vESS",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "V100R005C10"
},
{
"status": "affected",
"version": "V100R001C10SPC200,V100R001C20SPC200,V200R001C00SPC300"
}
]
}
]