« Volver al listado

CVE-2014-9136

Estado: ModificadaAlta (8.8)—

Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Huawei — FusionmanagerHuawei — Usg2100 FirmwareHuawei — Usg2200 FirmwareHuawei — Usg5100 FirmwareHuawei — Usg5500 FirmwareHuawei — Usg9500 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-9136",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "FusionManager FusionManager All V100R002C03 versions, All V100R003C00 versions,",
          "versions": [
            {
              "status": "affected",
              "version": "FusionManager FusionManager All V100R002C03 versions, All V100R003C00 versions,"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-04-02T20:59:00.453",
  "references": [
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/hw-372186",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/hw-372186",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface."
    },
    {
      "lang": "es",
      "value": "Huawei FusionManager con software V100R002C03 y V100R003C00 podrían permitir a un atacante remoto no autenticado, llevar a cabo un ataque de CSRF contra el usuario de la interfaz web."
    }
  ],
  "lastModified": "2026-06-17T00:17:48.670",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:huawei:fusionmanager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F27EF98-F5DA-426D-9CDF-8E425A0B212A",
              "versionEndIncluding": "v100r002c03"
            },
            {
              "criteria": "cpe:2.3:a:huawei:fusionmanager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1468F171-852F-4CC1-BA64-340B35501A9B",
              "versionEndIncluding": "v100r003c00"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:usg9500_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4EB84AA3-8F2D-40F4-998F-D8941C38EB15",
              "versionEndIncluding": "v200r001c01spc800"
            },
            {
              "criteria": "cpe:2.3:o:huawei:usg9500_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F49A05F-6945-4C7D-BA45-3635840485BF",
              "versionEndIncluding": "v300r001c00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:usg2100_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C486D62-23FD-4D64-AF97-2A70B1D6B715",
              "versionEndIncluding": "v300r001c00spc900"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:usg2100:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "56136202-9759-4A86-A52B-AE841319C4DF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:usg2200_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD11D623-1A81-4535-9BA1-1C5A118FE70C",
              "versionEndIncluding": "v300r001c00spc900"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:usg2200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A78C3EBF-B7B0-4239-95CF-588D78FF6BA1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:usg5100_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B881A96B-5B20-44D3-A039-7EFFEFEFFAF8",
              "versionEndIncluding": "v300r001c00spc900"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:usg5100:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5140E0A4-AA43-4410-BE72-7A751B8025D1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:usg5500_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1799A24D-062B-4E70-BB59-41B8BC7D0A12",
              "versionEndIncluding": "v300r001c00spc900"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:usg5500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EDC12456-351D-4DA4-8576-7FE9157E61DC"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}