CVE-2014-9137

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@huawei.com

Published

2017-04-02

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Fusionmanager (Huawei)
• Usg2100 Firmware (Huawei)
• Usg2200 Firmware (Huawei)
• Usg5100 Firmware (Huawei)
• Usg5500 Firmware (Huawei)
• Usg9500 Firmware (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/hw-372186