PT-2026-40621 · Www.Huawei.Com · Hg630 V2 Router+1

Eslam Medhat · Published 2026-05-13 · Updated 2026-05-13 · CVE-2020-37220

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei HG630 V2 (affected versions not specified)

Description An authentication bypass allows unauthenticated attackers to obtain administrative access by retrieving the device serial number. Attackers can query the '/api/system/deviceinfo' endpoint to extract the SerialNumber field and use the last 8 characters as the default password to log in to the router.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-37220

Affected Products

Hg630 V2 Router

Huawei Hg630 Router

References · 4

• 🔥 https://exploit-db.com/exploits/48310 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37220 · Security Note
• https://vulncheck.com/advisories/huawei-hg630-v2-router-authentication-bypass-via-serial-number · Note
• https://youtube.com/watch?v=vOrIL7L_cVc · Note