MEDIUM🇵🇱 Wersja polska

CVE-2023-52718

CVSS 6.4v3.1pub. 2024-12-28upd. 2025-01-13

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This vulnerability has been assigned a (CVE)ID:CVE-2023-52718

CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Huawei Pt9030 15

    HW
    Huawei
    wszystkie wersje

  • Huawei Pt9030 15 Firmware

    OS
    Huawei
    3.0.3.266

  • Huawei Ws7206 10

    HW
    Huawei
    wszystkie wersje

  • Huawei Ws7206 10 Firmware

    OS
    Huawei
    11.0.5.192.1.0.203

  • Huawei Ws7290 15

    HW
    Huawei
    wszystkie wersje

  • Huawei Ws7290 15 Firmware

    OS
    Huawei
    3.0.3.266

  • Huawei Ws8000 10

    HW
    Huawei
    wszystkie wersje

  • Huawei Ws8000 10 Firmware

    OS
    Huawei
    3.0.3.236

  • Huawei Ws8001 10

    HW
    Huawei
    wszystkie wersje

  • Huawei Ws8001 10 Firmware

    OS
    Huawei
    3.0.3.242

  • Huawei Ws8002 10

    HW
    Huawei
    wszystkie wersje

  • Huawei Ws8002 10 Firmware

    OS
    Huawei
    3.0.3.242

  • Huawei Ws8500 10

    HW
    Huawei
    wszystkie wersje

  • Huawei Ws8500 10 Firmware

    OS
    Huawei
    3.0.3.235

  • Huawei Ws8502 10

    HW
    Huawei
    wszystkie wersje

  • Huawei Ws8502 10 Firmware

    OS
    Huawei
    3.0.3.242

  • Huawei Ws8700 10

    HW
    Huawei
    wszystkie wersje

  • Huawei Ws8700 10 Firmware

    OS
    Huawei
    3.0.3.251
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-7266HIGH7.5ten sam produkt

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerabil...

CVE-2019-0708CRITICAL9.8⚠ KEVten sam vendor

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services wh...

CVE-2026-34865CRITICAL10.0PL ✓ten sam vendor

HarmonyOS: przepełnienie bufora sterty (heap buffer overflow) w module WEB

CVE-2026-28536CRITICAL9.6PL ✓ten sam vendor

Pominięcie uwierzytelnienia w module autoryzacji urządzeń Huawei HarmonyOS

CVE-2025-64314CRITICAL9.3PL ✓ten sam vendor

Błąd kontroli uprawnień w module zarządzania pamięcią Huawei HarmonyOS