Vulnerability Database

309,587

Total vulnerabilities in the database

CVE-2014-9137

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

  • Published: Apr 2, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2014-9137
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
huawei / fusionmanager 100r002c03 100r002c03.x
huawei / fusionmanager 100r003c00 100r003c00.x
huawei / usg9500_firmware - 200r001c01spc800.x
huawei / usg9500_firmware 300r001c00 300r001c00.x
huawei / usg2100_firmware - 300r001c00spc900.x
huawei / usg2200_firmware - 300r001c00spc900.x
huawei / usg5100_firmware - 300r001c00spc900.x
huawei / usg5500_firmware - 300r001c00spc900.x