CVE-2023-7266 is a connection hijacking flaw in some Huawei home routers that can cause denial of service or information leakage. It scores 7.5 (High). Huawei lists fixed firmware for the TC7001-10, WS7200-10 and WS7206-10, so update each model to the repair version in its advisory.
What's affected
Huawei's advisory (huawei-sa-CHViSHHR-d616b19e) lists three models, each with an affected and a repair version.
- TC7001-10: affected 2.0.0.336(SP6C300), repair 2.0.0.336(SP19C300).
- WS7200-10: affected WS7200-10-OTA 3.0.3.215-fullpackage(auto_1), repair 4.2.0.13(V5R2).
- WS7206-10: affected WS7206-10-OTA 4.0.0.16(V3R2)-fullpackage(auto), repair 4.2.0.11(V5R2).
Source conflicts: the NVD record lists the TC7001-10 and WS7200-10 only, while Huawei also lists the WS7206-10. NVD shows a publication date of 28 December 2024, while Huawei's advisory carries an initial release date of 19 June 2024. The CVSS 7.5 score and the vector match in both.
The vector is network reachable, no privileges, no user interaction, with the impact on availability. Huawei says the attacker has to be on the same LAN as the victim device and learn information about the device and network. The weakness is CWE-420, unprotected alternate channel. KEV is false.
How to check if you're exposed
Open the router's web interface or the vendor app and read the firmware version for your model. Compare it with the repair versions above. Many Huawei home routers update automatically, so the device may already be fixed.
If your router is supplied by an internet provider, the provider may control the update schedule. Ask them to confirm the firmware level.
What to do now
- Update each router to the repair version in Huawei's advisory, or confirm that automatic update has done so.
- Check which devices share the LAN with the router. The attack needs a position on the same local network.
- Use a guest network for visitors and untrusted devices.
- Contact your internet provider if the router is provider managed and still shows an affected version.
- Use encrypted connections, such as HTTPS and VPN, so that injected or intercepted data in a session is less useful.
Why it matters
Huawei's description is specific: the router lacks a reverse address check and TCP connection tracing, so an attacker on the same LAN can hijack TCP sessions and inject forged messages. That is a design level gap in how the router tracks which packets belong to which connection.
The real world risk depends on who shares your network. In a home with trusted devices it is small. In a shared flat, a cafe or a small office with guest access, it is larger. Keeping untrusted devices off the main LAN is the simplest defense, and updating the firmware closes the hole.
Quick check
Does the attacker need to be on my network?
Huawei says so: the attacker needs to be on the same LAN as the victim device.
What fixes CVE-2023-7266?
The repair versions in Huawei's advisory, listed above for each model.
Sources
Last reviewed: 19 October 2026.
