Huawei Fusionmanager vulnerabilities

2 CVEs affecting Huawei Fusionmanager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-9137, published 2017-04-02.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-9137, published 2017-04-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with…
• CVE-2014-9136, published 2017-04-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.