CVE-2023-52718
6.4
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408)
This vulnerability has been assigned a (CVE)ID:CVE-2023-52718
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Huawei | PT9030-15 | 3.0.3.266 | affected |
| Huawei | WS7206-10 | 11.0.5.19 | affected |
| Huawei | WS7206-10 | 2.1.0.203 | affected |
| Huawei | WS7290-15 | 3.0.3.266 | affected |
| Huawei | WS8000-10 | WS8000-16 3.0.3.236 | affected |
| Huawei | WS8001-10 | 3.0.3.242 | affected |
| Huawei | WS8002-10 | 3.0.3.242 | affected |
| Huawei | WS8500-10 | WS8500-16 3.0.3.235 | affected |
| Huawei | WS8502-10 | 3.0.3.242 | affected |
| Huawei | WS8700-10 | 3.0.3.251 | affected |
Weaknesses
- CWE-420: CWE-420 Unprotected Alternate Channel
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.