CVE-2014-9136: CSRF
Published Apr 2, 2017
·Updated
Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.
Affected Software
13 affected components
Huawei FusionManager<=v100r002c03
Huawei FusionManager<=v100r003c00
Huawei Usg9500 Firmware<=v200r001c01spc800
Huawei Usg9500 Firmware<=v300r001c00
Huawei USG9500
Huawei Usg2100 Firmware<=v300r001c00spc900
Huawei USG2100
Huawei Usg2200 Firmware<=v300r001c00spc900
Huawei USG2200
Huawei Usg5100 Firmware<=v300r001c00spc900
Huawei USG5100
Huawei Usg5500 Firmware<=v300r001c00spc900
Huawei USG5500
Event History
Apr 2, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2014-9136?
CVE-2014-9136 has been rated as a medium severity vulnerability due to the potential for CSRF attacks.
2
How do I fix CVE-2014-9136?
To mitigate CVE-2014-9136, upgrade Huawei FusionManager to a version later than V100R003C00.
3
What systems are affected by CVE-2014-9136?
CVE-2014-9136 affects Huawei FusionManager software versions V100R002C03 and V100R003C00.
4
Can CVE-2014-9136 be exploited remotely?
Yes, CVE-2014-9136 can be exploited remotely by an unauthenticated attacker.
5
What type of attack does CVE-2014-9136 facilitate?
CVE-2014-9136 facilitates a Cross-Site Request Forgery (CSRF) attack against users of the web interface.