First published: Sat Dec 28 2024(Updated: )
A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This vulnerability has been assigned a (CVE)ID:CVE-2023-52718
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Huawei pt9030-15 | =3.0.3.266 | |
Huawei PT9030-15 Firmware | ||
All of | ||
Huawei WS7206-10 firmware | =11.0.5.19 | |
Huawei ws7206-10 firmware | ||
All of | ||
Huawei WS7206-10 firmware | =2.1.0.203 | |
Huawei ws7206-10 firmware | ||
All of | ||
Huawei WS7290-15 | =3.0.3.266 | |
Huawei WS7290-15 Firmware | ||
All of | ||
Huawei WS8000-10 Firmware | =3.0.3.236 | |
Huawei WS8000-10 Firmware | ||
All of | ||
Huawei WS8001-10 Firmware | =3.0.3.242 | |
Huawei WS8001-10 Firmware | ||
All of | ||
Huawei WS8002-10 | =3.0.3.242 | |
Huawei WS8002-10 Firmware | ||
All of | ||
Huawei WS8500-10 Firmware | =3.0.3.235 | |
Huawei WS8500-10 Firmware | ||
All of | ||
Huawei WS8502-10 | =3.0.3.242 | |
Huawei WS8502-10 | ||
All of | ||
Huawei WS8700-10 Firmware | =3.0.3.251 | |
Huawei ws8700-10 firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-52718 has been identified as a critical vulnerability that could lead to denial of service or information leakage.
To fix CVE-2023-52718, it is recommended to update the affected Huawei home router firmware to the latest version provided by Huawei.
CVE-2023-52718 affects multiple Huawei home router models including PT9030-15, WS7206-10, WS7290-15, WS8000-10, WS8001-10, WS8002-10, WS8500-10, WS8502-10, and WS8700-10.
Exploitation of CVE-2023-52718 could lead to denial of service attacks or unauthorized information leakage.
Currently, the recommended solution is to update the firmware, as there are no confirmed workarounds for CVE-2023-52718.