Huawei WS7200-10 Firmware vulnerabilities

4 CVEs affecting Huawei WS7200-10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-7266, published 2024-12-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9122, published 2020-10-12. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions…
CVE-2023-7266, published 2024-12-28. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This…
CVE-2021-46835, published 2022-09-20. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers.
CVE-2022-33735, published 2022-09-20. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be…