CVE-2014-9137

2017-04-0220:00:00

huawei

www.cve.org

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.0%

JSON

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

CNA Affected

[
  {
    "product": "USG9500,USG2100,USG2200,USG5100,USG5500, USG9500 V200R001C01SPC800 and earlier versions, All V300R001C00 versions,USG2100 V300R001C00SPC900 and earlier versions,USG2200 V300R001C00SPC900,USG5100 V300R001C00SPC900,",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "USG9500,USG2100,USG2200,USG5100,USG5500, USG9500 V200R001C01SPC800 and earlier versions, All V300R001C00 versions,USG2100 V300R001C00SPC900 and earlier versions,USG2200 V300R001C00SPC900,USG5100 V300R001C00SPC900,"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/hw-372186