Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 17/10/2017 Updated: 09/10/2019

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Subscribe to Multiflex M10a Controller Firmware

A Cross-Site Request Forgery issue exists in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an malicious user to execute unauthorized code, resulting in changes to the configuration of the device.

Vulnerable Product	Search on Vulmon	Subscribe to Product
prominent multiflex_m10a_controller_firmware

CWE-352 https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01 http://www.securityfocus.com/bid/101259 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-14011

Vulnerability Summary

References

Vulmon Search

About

Products

Connect