Not rated
CVE-2017-14011 A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface
Description
A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ProMinent MultiFLEX M10a Controller | Versions not published |
Other CVEs of ProMinent MultiFLEX M10a Controller
The 5 CVEs of ProMinent MultiFLEX M10a Controller →
CVE-2017-14013
A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web…
Not rated
CVE-2017-14005
An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface
Not rated
CVE-2017-14007
An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface
Not rated
CVE-2017-14009
An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface
Not rated