description: A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.
problem types: CWE-352
affected:
{
product: ProMinent MultiFLEX M10a Controller
vendor: n/a
versions:
status: affected, version: ProMinent MultiFLEX M10a Controller
}