CVE-2023-52718

highpriority · track · 32EPSS 0.002 · 5 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.16% (5th) EPSS

CVSS 8.1 · high

Is it mine?

31 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-26

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This vulnerability has been assigned a (CVE)ID:CVE-2023-52718

cvss

Technical severity, 0–10. One row per scoring source.

8.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.4–8.1

v3.18.1highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.2

v3.16.4mediumAV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.4mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.16.4mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · psirt@huawei.comexploitability 0.5 · impact 5.9

v3.17.4highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-420US

affected products (31)

Products and version ranges known to be affected.

Huawei Routerall versionscert_bundDEcpe:/h:huawei:router:-
Huawei PT9030-15≤ 3.0.3.266enisa_euvdEU
Huawei WS7206-10≤ 11.0.5.19enisa_euvdEU
Huawei WS7206-10≤ 2.1.0.203enisa_euvdEU
Huawei WS7290-15≤ 3.0.3.266enisa_euvdEU
Huawei WS8000-10≤ WS8000-16 3.0.3.236enisa_euvdEU
Huawei WS8001-10≤ 3.0.3.242enisa_euvdEU
Huawei WS8002-10≤ 3.0.3.242enisa_euvdEU
Huawei WS8500-10≤ WS8500-16 3.0.3.235enisa_euvdEU
Huawei WS8502-10≤ 3.0.3.242enisa_euvdEU
Huawei WS8700-10≤ 3.0.3.251enisa_euvdEU
Huawei Technologies Co., Ltd. PT9030-15≤ 3.0.3.270fstec_bduRU
Huawei Technologies Co., Ltd. WS7206-102.1.0.203 → 2.1.0.205fstec_bduRU
Huawei Technologies Co., Ltd. WS7206-103.0.3.207 → 11.0.5.19fstec_bduRU
Huawei Technologies Co., Ltd. WS7290-153.0.3.266 → 3.0.3.270fstec_bduRU
Huawei Technologies Co., Ltd. WS8000-103.0.3.236 → 3.0.3.239fstec_bduRU
Huawei Technologies Co., Ltd. WS8001-103.0.3.242 → 4.0.0.11(V3R2)fstec_bduRU
Huawei Technologies Co., Ltd. WS8002-103.0.3.242 → 4.0.0.11(V3R2)fstec_bduRU
Huawei Technologies Co., Ltd. WS8500-103.0.3.235 → 3.0.3.239fstec_bduRU
Huawei Technologies Co., Ltd. WS8502-103.0.3.242 → 4.0.0.11(V3R2)fstec_bduRU

showing 20 of 31

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2024-0957Huawei Home Router: Schwachstelle ermöglicht Denial of Service und Offenlegung von InformationenDeutsch2024-04-23csaf · cert_bundDE
Ein entfernter authentifizierter Angreifer kann eine Schwachstelle im Huawei-Router ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2024-12-28modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan