Huawei USG2100 Firmware vulnerabilities

3 CVEs affecting Huawei USG2100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-9137, published 2017-04-02.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-6669, published 2016-09-22. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600…
• CVE-2014-9137, published 2017-04-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with…
• CVE-2014-9136, published 2017-04-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.