8.1

CVE-2023-52718

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408)

This vulnerability has been assigned a (CVE)ID:CVE-2023-52718
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Pt9030-15 Firmware Version 3.0.3.266
   Huawei ≫ Pt9030-15 Version -
Huawei ≫ Ws7206-10 Firmware Version 11.0.5.19
   Huawei ≫ Ws7206-10 Version -
Huawei ≫ Ws7206-10 Firmware Version 2.1.0.203
   Huawei ≫ Ws7206-10 Version -
Huawei ≫ Ws7290-15 Firmware Version 3.0.3.266
   Huawei ≫ Ws7290-15 Version -
Huawei ≫ Ws8000-10 Firmware Version 3.0.3.236
   Huawei ≫ Ws8000-10 Version -
Huawei ≫ Ws8001-10 Firmware Version 3.0.3.242
   Huawei ≫ Ws8001-10 Version -
Huawei ≫ Ws8002-10 Firmware Version 3.0.3.242
   Huawei ≫ Ws8002-10 Version -
Huawei ≫ Ws8500-10 Firmware Version 3.0.3.235
   Huawei ≫ Ws8500-10 Version -
Huawei ≫ Ws8502-10 Firmware Version 3.0.3.242
   Huawei ≫ Ws8502-10 Version -
Huawei ≫ Ws8700-10 Firmware Version 3.0.3.251
   Huawei ≫ Ws8700-10 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.049
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.8 5.2
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Huawei 6.4 0.5 5.9
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-420 Unprotected Alternate Channel

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

https://www.huawei.com/br/psirt/security-advisories/2024/huawei-sa-chvishhr-d50dedde-en
Vendor Advisory