CVE-2014-9137: Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V30...

Security readout for executives and security teams

Certain Huawei USG firewall web interfaces are reported vulnerable to cross-site request forgery. An attacker could trick an authenticated administrator into causing unintended web-interface actions. The business risk depends on whether affected management interfaces are reachable and used by privileged staff. Exposure is most likely where affected Huawei USG appliance web management is enabled and administrators browse the web while authenticated to it. Internet-facing or broadly reachable management interfaces increase concern. Treat as a firewall management-plane issue. Prioritize verification on perimeter or high-value network appliances, especially where web administration is reachable beyond a tightly controlled admin network. Mitigation focus: Identify affected Huawei USG models and software versions in inventory.; Review Huawei PSIRT advisory HW-372186 for vendor-confirmed fixes or mitigations.; Restrict web management access to trusted administrative networks..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.