Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2014-9137

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

  • Published: Apr 2, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-9137
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
huawei / fusionmanager 100r002c03 100r002c03.x
huawei / fusionmanager 100r003c00 100r003c00.x
huawei / usg9500_firmware - 200r001c01spc800.x
huawei / usg9500_firmware 300r001c00 300r001c00.x
huawei / usg2100_firmware - 300r001c00spc900.x
huawei / usg2200_firmware - 300r001c00spc900.x
huawei / usg5100_firmware - 300r001c00spc900.x
huawei / usg5500_firmware - 300r001c00spc900.x