CVE:CVE-2014-9137
CNNVD:CNNVD-201704-206
华为USG9500等都是中国华为（Huawei）公司的防火墙产品。
多款华为防火墙USG系列产品中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权的操作。以下产品和版本受到影响：华为USG9500 V200R001C01SPC800及之前的版本，V300R001C00版本；USG2100 V300R001C00SPC900及之前的版本；USG2200 V300R001C00SPC900及之前的版本；USG5100 V300R001C00SPC900及之前的版本；USG5500 V300R001C00SPC900及之前的版本。
solution:Upgrade huawei fusionmanager to a higher version than v100r002c03,v100r003c00,and avoid the version v100r002c03,v100r003c00; Upgrade huawei usg9500_firmware to a higher version than v200r001c01spc800,v300r001c00,and avoid the version (,v200r001c01spc800],v300r001c00; Upgrade huawei usg2100_firmware to a higher version than v300r001c00spc900,and avoid the version (,v300r001c00spc900]; Upgrade huawei usg2200_firmware to a higher version than v300r001c00spc900,and avoid the version (,v300r001c00spc900]; Upgrade huawei usg5100_firmware to a higher version than v300r001c00spc900,and avoid the version (,v300r001c00spc900]; Upgrade huawei usg5500_firmware to a higher version than v300r001c00spc900,and avoid the version (,v300r001c00spc900]