High severity · published Dec 28, 2024
CVE-2023-7266
Some Huawei home routers have a connection hijacking vulnerability
8.1
CVSS
0.3%
EPSS
No
On KEV
Description
Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605)
This vulnerability has been assigned a (CVE)ID:CVE-2023-7266
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
TC7001-10 · Huawei
2.0.0.336(SP6C300) · source: vendor
WS
WS7200-10 · Huawei
WS7200-10-OTA 3.0.3.215-fullpackage(auto_1) · source: vendor
WS
WS7206-10 · Huawei
WS7206-10-OTA 4.0.0.16(V3R2)-fullpackage(auto) · source: vendor
TF
Tc7001-10 Firmware · Huawei
2.0.0.336(sp6c300) · source: NVD
WF
Ws7200-10 Firmware · Huawei
3.0.3.215 · source: NVD
WF
Ws7206-10 Firmware · Huawei
4.0.0.16(v3r2) · source: NVD