multiflex m10a controller firmware vulnerabilities and fixes

Recent CVEs affecting multiflex m10a controller firmware, with upgrade or downgrade steps. 5 tracked.

Also searched as: multiflexm10acontrollerfirmware.

multiflex m10a controller firmware has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-10-17. Highest priority: CVE-2017-14005 (score 49/100).

• CVE-2017-14013 MEDIUM 5.6 MITIGATE A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller
• CVE-2017-14011 HIGH 8.8 MITIGATE A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface
• CVE-2017-14009 MEDIUM 6.5 MITIGATE An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface
• CVE-2017-14007 MEDIUM 5.6 MITIGATE An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface
• CVE-2017-14005 HIGH 8.8 MITIGATE An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface

FAQ

How do I fix multiflex m10a controller firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is multiflex m10a controller firmware being exploited right now?

None of the tracked multiflex m10a controller firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which multiflex m10a controller firmware CVE should I patch first?

CVE-2017-14005 currently ranks highest (49/100): An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

RSS feed for multiflex m10a controller firmware · ← Back to latest CVEs