CVE-2017-14011: Prominent Multiflex m10a Controller Firmware

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.

Affected products

• Prominent Multiflex m10a Controller Firmware: any version

Published 2017-10-17. Last modified 2026-06-17.