Description
A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ProMinent MultiFLEX M10a Controller | ProMinent MultiFLEX M10a Controller | — |
Advisories 1
- ICSA-17-285-01 ProMinent MultiFLEX M10a Controller CISA ICS & IT advisories · Oct 12, 2017