First published: Sat Dec 28 2024(Updated: )
Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This vulnerability has been assigned a (CVE)ID:CVE-2023-7266
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Huawei TC7001-10 Firmware | =2.0.0.336\(sp6c300\) | |
Huawei tc7001-10 firmware | ||
All of | ||
Huawei WS7200-10 firmware | =3.0.3.215 | |
Huawei WS7200-10 firmware | ||
All of | ||
Huawei WS7206-10 firmware | =4.0.0.16\(v3r2\) | |
Huawei ws7206-10 firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-7266 has been classified as a moderate severity vulnerability.
To fix CVE-2023-7266, ensure that your Huawei home router firmware is updated to the latest version as recommended by Huawei.
CVE-2023-7266 can enable connection hijacking, resulting in potential denial of service (DoS) or information leakage.
CVE-2023-7266 affects specific firmware versions of the Huawei TC7001-10, WS7200-10, and WS7206-10 routers.
You can determine vulnerability to CVE-2023-7266 by checking the firmware version of your Huawei device against the affected versions listed.