MEDIUM🇵🇱 Wersja polska

CVE-2023-52718

CVSS 6.4v3.1pub. 2024-12-28upd. 2025-01-13

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This vulnerability has been assigned a (CVE)ID:CVE-2023-52718

CVSS Vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Huawei Pt9030 15
HW
Huawei
all versions
Huawei Pt9030 15 Firmware
OS
Huawei
3.0.3.266
Huawei Ws7206 10
HW
Huawei
all versions
Huawei Ws7206 10 Firmware
OS
Huawei
11.0.5.192.1.0.203
Huawei Ws7290 15
HW
Huawei
all versions
Huawei Ws7290 15 Firmware
OS
Huawei
3.0.3.266
Huawei Ws8000 10
HW
Huawei
all versions
Huawei Ws8000 10 Firmware
OS
Huawei
3.0.3.236
Huawei Ws8001 10
HW
Huawei
all versions
Huawei Ws8001 10 Firmware
OS
Huawei
3.0.3.242
Huawei Ws8002 10
HW
Huawei
all versions
Huawei Ws8002 10 Firmware
OS
Huawei
3.0.3.242
Huawei Ws8500 10
HW
Huawei
all versions
Huawei Ws8500 10 Firmware
OS
Huawei
3.0.3.235
Huawei Ws8502 10
HW
Huawei
all versions
Huawei Ws8502 10 Firmware
OS
Huawei
3.0.3.242
Huawei Ws8700 10
HW
Huawei
all versions
Huawei Ws8700 10 Firmware
OS
Huawei
3.0.3.251

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

References

www.huawei.com/br/psirt/security-advisories/2024/huawei…

Related vulnerabilities

CVE-2023-7266HIGH7.5same product

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerabil...

CVE-2019-0708CRITICAL9.8⚠ KEVPL ✓same vendor

BlueKeep — krytyczny RCE w Remote Desktop Services (RDP)

CVE-2026-34865CRITICAL10.0PL ✓same vendor

HarmonyOS: przepełnienie bufora sterty (heap buffer overflow) w module WEB

CVE-2026-28536CRITICAL9.6PL ✓same vendor

Pominięcie uwierzytelnienia w module autoryzacji urządzeń Huawei HarmonyOS

CVE-2025-64314CRITICAL9.3PL ✓same vendor

Błąd kontroli uprawnień w module zarządzania pamięcią Huawei HarmonyOS