A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.
[
{
"product": "ProMinent MultiFLEX M10a Controller",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "ProMinent MultiFLEX M10a Controller"
}
]
}
]