CVE-2023-7266 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This vulnerability has been assigned a (CVE)ID:CVE-2023-7266

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	Tc7001-10 Firmware	2.0.0.336\(sp6c300\)
Huawei	Tc7001-10	-
Huawei	Ws7200-10 Firmware	3.0.3.215
Huawei	Ws7200-10	-
Huawei	Ws7206-10 Firmware	4.0.0.16\(v3r2\)
Huawei	Ws7206-10	-

Related Weaknesses (CWE)

CWE-420

References

https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-chvishhr-d616Vendor Advisory

FAQ

What is CVE-2023-7266?

CVE-2023-7266 is a vulnerability with a CVSS score of 7.5 (HIGH). Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This vulner...

How severe is CVE-2023-7266?

CVE-2023-7266 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-7266?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Tc7001-10 Firmware, Huawei Tc7001-10, Huawei Ws7200-10 Firmware, Huawei Ws7200-10, Huawei Ws7206-10 Firmware.