CVE-2014-9431: Multiple cross-site request forgery (CSRF) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remo...

Security readout for executives and security teams

This issue affects Smoothwall Express 3.1 and 3.0 SP3. If an administrator is tricked while logged in, an attacker may cause password-change requests for the admin or dial password. Business risk is loss of firewall or gateway administration, but the provided sources do not give a severity score or confirm active exploitation. Exposure is most likely where Smoothwall Express 3.1 or 3.0 SP3 is still deployed and administrators access the web admin interface from browsers that can also reach attacker-controlled content. Prioritize asset discovery and management-interface restriction. This is not listed in KEV and lacks a CVSS score in the provided sources, but administrator password change impact can be material if legacy Smoothwall systems remain in use. Mitigation focus: Identify any Smoothwall Express 3.1 or 3.0 SP3 deployments.; Check Smoothwall or maintainer guidance for fixes or supported replacements.; Restrict administrative interface access to trusted management networks or VPN..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.