CVE-2014-9137

Name: CVE-2014-9137
Creator: NVD / NIST
Published: 2017-04-02T20:59:00.47+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.40%

Last modified Jun 17, 2026

CVE-2014-9137 is a vulnerability of currently unknown severity. Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.

Description

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

Metrics

EPSS Probability

0.40%

32.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-352

Affected Software

Vendor	Product	Versions
Huawei	Fusionmanager	v100r002c03
Huawei	Fusionmanager	v100r003c00
Huawei	Usg9500 Firmware	<= v200r001c01spc800
Huawei	Usg9500 Firmware	v300r001c00
Huawei	Usg2100 Firmware	<= v300r001c00spc900
Huawei	Usg2200 Firmware	<= v300r001c00spc900
Huawei	Usg5100 Firmware	<= v300r001c00spc900
Huawei	Usg5500 Firmware	<= v300r001c00spc900

References

http://www.huawei.com/en/psirt/security-advisories/hw-372186Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/hw-372186Vendor Advisory

Timeline

Published: Apr 2, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-9137?

How severe is CVE-2014-9137?

Severity scoring for CVE-2014-9137 is pending analysis. The EPSS model estimates a 0.40% probability of exploitation in the next 30 days.

How do I fix CVE-2014-9137?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-9137?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST