CVE-2014-9137

🗓️ 02 Apr 2017 20:00:00Reported by huaweiType

Huawei USG9500 and USG2100 with software V200R001C01SPC800 and earlier, V300R001C00; USG2200 with V300R001C00SPC900, USG5100 with V300R001C00SPC900 possible CSRF attack

Reporter	Title	Published	Views	Family All 6
CNVD	Multiple Huawei Firewall USG Series Products Cross-Site Request Forgery Vulnerabilities	7 Apr 201700:00	–	cnvd
Cvelist	CVE-2014-9137	2 Apr 201720:00	–	cvelist
EUVD	EUVD-2014-8962	7 Oct 202500:30	–	euvd
Huawei	Security Advisory-CSRF Vulnerabilities in Multiple Products	24 Sep 201400:00	–	huawei
NVD	CVE-2014-9137	2 Apr 201720:59	–	nvd
Prion	Cross site request forgery (csrf)	2 Apr 201720:59	–	prion

NVD

Node

huawei fusionmanagerMatchv100r002c03

huawei fusionmanagerMatchv100r003c00

Node

huawei usg9500_firmwareRange≤v200r001c01spc800

huawei usg9500_firmwareMatchv300r001c00

AND

huawei usg9500Match-

Node

huawei usg2100_firmwareRange≤v300r001c00spc900

AND

huawei usg2100Match-

Node

huawei usg2200_firmwareRange≤v300r001c00spc900

AND

huawei usg2200Match-

Node

huawei usg5100_firmwareRange≤v300r001c00spc900

AND

huawei usg5100Match-

Node

huawei usg5500_firmwareRange≤v300r001c00spc900

AND

huawei usg5500Match-

[
  {
    "product": "USG9500,USG2100,USG2200,USG5100,USG5500, USG9500 V200R001C01SPC800 and earlier versions, All V300R001C00 versions,USG2100 V300R001C00SPC900 and earlier versions,USG2200 V300R001C00SPC900,USG5100 V300R001C00SPC900,",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "USG9500,USG2100,USG2200,USG5100,USG5500, USG9500 V200R001C01SPC800 and earlier versions, All V300R001C00 versions,USG2100 V300R001C00SPC900 and earlier versions,USG2200 V300R001C00SPC900,USG5100 V300R001C00SPC900,"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/hw-372186

13 May 2026 00:24Current

8.6High risk

Vulners AI Score8.6

CVSS 26.8

CVSS 38.8

EPSS0.0009

CWE-352