High severity · published Dec 28, 2024
CVE-2023-52718
A connection hijacking vulnerability exists in some Huawei home routers
8.1
CVSS
0.2%
EPSS
No
On KEV
Description
A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408)
This vulnerability has been assigned a (CVE)ID:CVE-2023-52718
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PT
PT9030-15 · Huawei
3.0.3.266 · source: vendor
WS
WS7206-10 · Huawei
11.0.5.19; 2.1.0.203 · source: vendor
WS
WS7290-15 · Huawei
3.0.3.266 · source: vendor
WS
WS8000-10 · Huawei
WS8000-16 3.0.3.236 · source: vendor
WS
WS8001-10 · Huawei
3.0.3.242 · source: vendor
WS
WS8002-10 · Huawei
3.0.3.242 · source: vendor
WS
WS8500-10 · Huawei
WS8500-16 3.0.3.235 · source: vendor
WS
WS8502-10 · Huawei
3.0.3.242 · source: vendor
WS
WS8700-10 · Huawei
3.0.3.251 · source: vendor
PF
Pt9030-15 Firmware · Huawei
3.0.3.266 · source: NVD
WF
Ws7206-10 Firmware · Huawei
11.0.5.19; 2.1.0.203 · source: NVD
WF
Ws7290-15 Firmware · Huawei
3.0.3.266 · source: NVD