Prominent Multiflex M10a Controller Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Prominent Multiflex M10a Controller Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-14005 — CVSS 8.8 (high): An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a new password for a…
• CVE-2017-14011 — CVSS 8.8 (high): A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not…
• CVE-2017-14009 — CVSS 6.5 (medium): An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated user uses the…
• CVE-2017-14007 — CVSS 5.6 (medium): An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is…
• CVE-2017-14013 — CVSS 5.6 (medium): A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out…