I don't think they have this kind of issue, from the pictures I saw, the front end is using a framework for sure, and any common one have this issues solved, at least the easy one.

In the case of bitaxe, i think that some common defensive behaviors are skipped to prioritize resource optimization, most of bitaxe don't have to be publicly expose.

I don’t know the best way to raise this to the FutureBit team, but that’s one brand that comes to mind as being on to ensure they also aren’t susceptible 

WeAreAllSatoshi

nikotsla

bitcoin_Mining

What is the CSRF Vulnerability on Bitaxe/AxeOS?

Roll

I feel like this is very plausible to exist on other miner software that expects to be accessible only on LAN.