CVE-2021-22338

There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input XML message. Attacker can send specific message to exploit this vulnerability, leading to the module denial of service.

• CWE-611

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210421-01-cgp-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210421-01-cgp-enVendor Advisory

Published

Jun 29, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22332There is a pointer double free vulnerability in some version…7.5
• CVE-2021-22333There is an Improper Validation of Array Index vulnerability…9.8
• CVE-2021-22334There is an Improper Access Control vulnerability in Huawei …7.4
• CVE-2021-22335There is a Memory Buffer Improper Operation Limit vulnerabil…7.8
• CVE-2021-22336There is an Improper Control of Generation of Code vulnerabi…7.5
• CVE-2021-22337There is an Information Disclosure vulnerability in Huawei S…5.3
• CVE-2021-22339There is a denial of service vulnerability in some versions …6.5
• CVE-2021-2234Vulnerability in the Java VM component of Oracle Database Se…5.3
• CVE-2021-22340There is a multiple threads race condition vulnerability in …4.1
• CVE-2021-22341There is a memory leak vulnerability in Huawei products. A r…4.9
• CVE-2021-22342There is an information leak vulnerability in Huawei product…4.9
• CVE-2021-22343There is a Configuration Defect vulnerability in Huawei Smar…9.1