NetSight
IP …
high8.8

CVE-2014-9137

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with so…

Impact

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

Affected products

VendorProductAffected versions
HuaweiFusionmanager
Versions v100r002c03, v100r003c00
HuaweiUsg9500 Firmware
through v200r001c01spc800
Version v300r001c00
HuaweiUsg2100 Firmware
through v300r001c00spc900
HuaweiUsg2200 Firmware
through v300r001c00spc900
HuaweiUsg5100 Firmware
through v300r001c00spc900
HuaweiUsg5500 Firmware
through v300r001c00spc900

Weakness classification

CWE-352

References