High ICSA-17-285-01 5 CVEs

ProMinent MultiFLEX M10a Controller

Published Oct 12, 2017 · Updated Oct 12, 2017

Vendor: ProMinent Product: MultiFLEX M10a Controller web interface

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 5

Unscored —

CVE-2017-14005

An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a…

Oct 17, 2017
Unscored —

CVE-2017-14007

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user'…

Oct 17, 2017
Unscored —

CVE-2017-14009

An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticate…

Oct 17, 2017
Unscored —

CVE-2017-14011

A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application…

Oct 17, 2017
Unscored —

CVE-2017-14013

A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web inter…

Oct 17, 2017

Revision history

2017-10-12 #1
ICSA-17-285-01 ProMinent MultiFLEX M10a Controller

References

ICS Advisory ICSA-17-285-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-285-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-285-01