Prominent

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Prominent records in CISA KEV

No Prominent vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Multiflex M10a Controller Firmware · all components

TI-2017-10188 CVE-2017-14005 · GHSA-wwgw-fwm7-pq39

MEDIUM 41

An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01363 Published 2017-10-17 No fix listed CWE-620

TI-2017-10194 CVE-2017-14011 · GHSA-f6m9-f3qm-rvhc

LOW 39

A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00641 Published 2017-10-17 No fix listed CWE-352

TI-2017-10192 CVE-2017-14009 · GHSA-hwf3-jmw4-9hxh

LOW 30

An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0073 Published 2017-10-17 No fix listed CWE-200

TI-2017-10196 CVE-2017-14013 · GHSA-7h4f-h4v7-62j6

LOW 27

A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0MEDIUM 5.6 Network No auth No interaction EPSS 0.00934 Published 2017-10-17 No fix listed CWE-602

TI-2017-10190 CVE-2017-14007 · GHSA-jrvx-j527-53gx

LOW 27

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0MEDIUM 5.6 Network No auth No interaction EPSS 0.00907 Published 2017-10-17 No fix listed CWE-613