CVE-2014-9136 Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.
HighCVSS 8.8
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei fusionmanager | <= v100r002c03 | No fix listed |
| Huawei fusionmanager | <= v100r003c00 | No fix listed |
| Huawei usg9500 firmware | <= v200r001c01spc800 | No fix listed |
| Huawei usg9500 firmware | <= v300r001c00 | No fix listed |
| Huawei usg2100 firmware | <= v300r001c00spc900 | No fix listed |
| Huawei usg2200 firmware | <= v300r001c00spc900 | No fix listed |
| Huawei usg5100 firmware | <= v300r001c00spc900 | No fix listed |
| Huawei usg5500 firmware | <= v300r001c00spc900 | No fix listed |
References
- www.huawei.com vendor-advisory