Description (CNA)
A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / ProMinent MultiFLEX M10a Controller | affected ProMinent MultiFLEX M10a Controller |
CWE
CWE-352
References
ADP enrichment
No English description supplied.