CVE-2023-52718

State: Published
Severity: 6.4 Medium
Published: Dec 28, 2024
Updated: Dec 28, 2024
Reserved: Apr 11, 2024

Description

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408)

This vulnerability has been assigned a (CVE)ID:CVE-2023-52718

Scores

CVSS	Score	Vector	Source
3.1	6.4 Medium	CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H	huawei

Weaknesses

CWE-420 Unprotected Alternate Channel

Affected Products

Product	Versions
PT9030-15Huawei	3.0.3.266Affected
WS7206-10Huawei	11.0.5.19Affected 2.1.0.203Affected
WS7290-15Huawei	3.0.3.266Affected
WS8000-10Huawei	WS8000-16 3.0.3.236Affected
WS8001-10Huawei	3.0.3.242Affected
WS8002-10Huawei	3.0.3.242Affected
WS8500-10Huawei	WS8500-16 3.0.3.235Affected
WS8502-10Huawei	3.0.3.242Affected
WS8700-10Huawei	3.0.3.251Affected

References

https://www.huawei.com/br/psirt/security-advisories/2024/huawei-sa-chvishhr-d50dedde-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.