Vulnerability · Published May 13, 2026 · Assigned by VulnCheck

CVE-2020-37220Huawei HG630 V2 Router Authentication Bypass via Serial Number

High 7.5

In plain English

A high-severity hard-coded credentials in HG630 V2 Router from www.huawei.com. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.4%top 70.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Huawei HG630 V2 router contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain administrative access by retrieving the device serial number. Attackers can query the /api/system/deviceinfo endpoint without authentication to extract the SerialNumber field, then use the last 8 characters as the default password to log in to the router.

Affected products (as reported)

Vendor	Product	Versions
www.huawei.com	HG630 V2 Router	0

Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

ExploitDB-48310 exploit
Reference third-party-advisory
VulnCheck Advisory: Huawei HG630 V2 Router Authentication Bypass via Serial Number third-party-advisory