Read the docs
TI-2023-29051 Aliases CVE-2023-52718GHSA-8jh8-6h58-693c

A connection hijacking vulnerability exists in some Huawei home routers.

Priority LOW 36CWE-420Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This vulnerability has been assigned a (CVE)ID:CVE-2023-52718

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00157 4th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiPT9030-153.0.3.266—No fix listedCNA
HuaweiWS7206-1011.0.5.19; 2.1.0.203—No fix listedCNA
HuaweiWS7290-153.0.3.266—No fix listedCNA
HuaweiWS8000-10WS8000-16 3.0.3.236—No fix listedCNA
HuaweiWS8001-103.0.3.242—No fix listedCNA
HuaweiWS8002-103.0.3.242—No fix listedCNA
HuaweiWS8500-10WS8500-16 3.0.3.235—No fix listedCNA
HuaweiWS8502-103.0.3.242—No fix listedCNA
HuaweiWS8700-103.0.3.251—No fix listedCNA
  • PT9030-15 VendorHuawei Affected 3.0.3.266 Fixed in — No fix listed CNA
  • WS7206-10 VendorHuawei Affected 11.0.5.19; 2.1.0.203 Fixed in — No fix listed CNA
  • WS7290-15 VendorHuawei Affected 3.0.3.266 Fixed in — No fix listed CNA
  • WS8000-10 VendorHuawei Affected WS8000-16 3.0.3.236 Fixed in — No fix listed CNA
  • WS8001-10 VendorHuawei Affected 3.0.3.242 Fixed in — No fix listed CNA
  • WS8002-10 VendorHuawei Affected 3.0.3.242 Fixed in — No fix listed CNA
  • WS8500-10 VendorHuawei Affected WS8500-16 3.0.3.235 Fixed in — No fix listed CNA
  • WS8502-10 VendorHuawei Affected 3.0.3.242 Fixed in — No fix listed CNA
  • WS8700-10 VendorHuawei Affected 3.0.3.251 Fixed in — No fix listed CNA

CPE configurations NVD · 19

CPEVersionsRoleVendor
cpe:2.3:o:huawei:pt9030-15_firmware:3.0.3.266:*:*:*:*:*:*:*3.0.3.266VulnerableHuawei
cpe:2.3:h:huawei:pt9030-15:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ws7206-10_firmware:11.0.5.19:*:*:*:*:*:*:*11.0.5.19VulnerableHuawei
cpe:2.3:h:huawei:ws7206-10:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ws7206-10_firmware:2.1.0.203:*:*:*:*:*:*:*2.1.0.203VulnerableHuawei
cpe:2.3:o:huawei:ws7290-15_firmware:3.0.3.266:*:*:*:*:*:*:*3.0.3.266VulnerableHuawei
cpe:2.3:h:huawei:ws7290-15:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ws8000-10_firmware:3.0.3.236:*:*:*:*:*:*:*3.0.3.236VulnerableHuawei
cpe:2.3:h:huawei:ws8000-10:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ws8001-10_firmware:3.0.3.242:*:*:*:*:*:*:*3.0.3.242VulnerableHuawei
  • cpe:2.3:o:huawei:pt9030-15_firmware:3.0.3.266:*:*:*:*:*:*:* Versions 3.0.3.266 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:pt9030-15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ws7206-10_firmware:11.0.5.19:*:*:*:*:*:*:* Versions 11.0.5.19 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ws7206-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ws7206-10_firmware:2.1.0.203:*:*:*:*:*:*:* Versions 2.1.0.203 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:ws7290-15_firmware:3.0.3.266:*:*:*:*:*:*:* Versions 3.0.3.266 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ws7290-15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ws8000-10_firmware:3.0.3.236:*:*:*:*:*:*:* Versions 3.0.3.236 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ws8000-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ws8001-10_firmware:3.0.3.242:*:*:*:*:*:*:* Versions 3.0.3.242 Vulnerable ·Huawei
Show 9 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:huawei:ws8001-10:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ws8002-10_firmware:3.0.3.242:*:*:*:*:*:*:*3.0.3.242VulnerableHuawei
cpe:2.3:h:huawei:ws8002-10:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ws8500-10_firmware:3.0.3.235:*:*:*:*:*:*:*3.0.3.235VulnerableHuawei
cpe:2.3:h:huawei:ws8500-10:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ws8502-10_firmware:3.0.3.242:*:*:*:*:*:*:*3.0.3.242VulnerableHuawei
cpe:2.3:h:huawei:ws8502-10:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:ws8700-10_firmware:3.0.3.251:*:*:*:*:*:*:*3.0.3.251VulnerableHuawei
cpe:2.3:h:huawei:ws8700-10:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:h:huawei:ws8001-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ws8002-10_firmware:3.0.3.242:*:*:*:*:*:*:* Versions 3.0.3.242 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ws8002-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ws8500-10_firmware:3.0.3.235:*:*:*:*:*:*:* Versions 3.0.3.235 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ws8500-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ws8502-10_firmware:3.0.3.242:*:*:*:*:*:*:* Versions 3.0.3.242 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ws8502-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:ws8700-10_firmware:3.0.3.251:*:*:*:*:*:*:* Versions 3.0.3.251 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ws8700-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-52718
  2. 2026-10-03 Alias added: GHSA-8jh8-6h58-693c

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences