CVE-2014-9136

Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@huawei.com

Published

2017-04-02

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Fusionmanager (Huawei)
• Usg2100 Firmware (Huawei)
• Usg2200 Firmware (Huawei)
• Usg5100 Firmware (Huawei)
• Usg5500 Firmware (Huawei)
• Usg9500 Firmware (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/hw-372186