Non notée
CVE-2017-14011 A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface
Description
A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ProMinent MultiFLEX M10a Controller | Versions non publiées |
Autres CVE de ProMinent MultiFLEX M10a Controller
Les 5 CVE de ProMinent MultiFLEX M10a Controller →
CVE-2017-14013
A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web…
Non notée
CVE-2017-14005
An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface
Non notée
CVE-2017-14007
An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface
Non notée
CVE-2017-14009
An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface
Non notée