Security Advisory

CVE-2017-14011

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-10-17 22:00:00

Last updated 2024-08-05 19:13:41

Assigner icscert

State PUBLISHED

Description

A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.

← Browse all CVEs View on cve.org ↗