CVE-2023-7266

HIGH

Huawei TC7001-10 WS7200-10 WS7206-10 Firmware - Connection Hijacking

Title source: llm

Description

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This vulnerability has been assigned a (CVE)ID:CVE-2023-7266

References (1)

Core 1

Core References

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-chvishhr-d616b19e-en

Scores

CVSS v3 7.5

EPSS 0.0007

EPSS Percentile 20.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-420

Status published

Products (3)

huawei/tc7001-10_firmware 2.0.0.336\(sp6c300\)

huawei/ws7200-10_firmware 3.0.3.215

huawei/ws7206-10_firmware 4.0.0.16\(v3r2\)

Published Dec 28, 2024

Tracked Since Feb 18, 2026