CVE-2014-9690

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-02 · updated 2026-06-17
Weakness: CWE-332

Description

Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator (RNG) used in the supplier's solution is not random enough. As a result, brute force cracking the PIN code is easier. After an attacker cracks the PIN, the attacker can access the Internet via the cracked device.

Affected products

WS318 V100R001C01B022 and earlier versions: through v100r001c01b022

References

http://www.huawei.com/en/psirt/security-advisories/hw-408091
http://www.huawei.com/en/psirt/security-advisories/hw-408091

Get alerted when CVE-2014-9690 or the next vulnerability affects your stack