CVE-2017-14011

Published: 2017-10-17T22:29Z

Last Modified: 2024-11-21T03:11Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt