CVE-2023-7266 Other in TC7001-10
Attackers can hijack connections on Huawei home routers, causing denial of service or information leakage.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-7266?
CVE-2023-7266 is a high-severity vulnerability in Huawei TC7001-10, published on 28 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This vulnerability has been assigned a (CVE)ID:CVE-2023-7266
Weakness: CWE-420
Which versions are affected by CVE-2023-7266?
It affects 3 products.
Products include Huawei Tc7001-10 Firmware, Huawei Ws7200-10 Firmware, Huawei Ws7206-10 Firmware.
How do I fix CVE-2023-7266?
No fix has been published for CVE-2023-7266 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-7266 being exploited?
There is no known exploitation of CVE-2023-7266 in the wild and no public exploit code.
Sources
Also known as GHSA-33fg-f8wx-chw2.