CVE-2014-9694

CVE-2014-9694 describes a CSRF vulnerability across Huawei Tecal server products (e.g., RH1288/RH2265/RH2285 family and others) where web access control token is not used. The malicious CSRF script, loaded from a login context to Huawei servers’ web UI, can execute unauthorized actions, potential...