387 matches found
CVE-2019-7278
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service...
CVE-2019-7276
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...
CVE-2019-7278
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service...
CVE-2019-7276
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...
CVE-2019-7275
Optergy Proton/Enterprise devices allow Open Redirect...
CVE-2019-7275
Optergy Proton/Enterprise devices allow Open Redirect...
Information disclosure
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...
Remote code execution
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...
Open redirect
Optergy Proton/Enterprise devices allow Open Redirect...
Design/Logic Flaw
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service...
CVE-2019-7272
CVE-2019-7272 affects Optergy Proton/Enterprise (versions ≤ 2.3.0a). The vulnerability is an information exposure via the username reset functionality, enabling an unauthorized attacker to enumerate usernames and, per Red Hat/CISA references, reveal internal details on the targeted system. Public...
CVE-2019-7273
CVE-2019-7273 affects Optergy Proton/Enterprise Building Management Systems (versions ≤ 2.3.0a). The issue is Cross-Site Request Forgery (CSRF) that can enable an attacker to perform privileged actions (e.g., adding an admin) via forged requests from a logged-in user. Public PoCs/exploits exist (...
CVE-2019-7273
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7274
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root...
CVE-2019-7274
CVE-2019-7274 affects Optergy Proton/Enterprise. The vulnerability is an authenticated file upload that can lead to remote code execution as root in Optergy Proton/Enterprise versions 2.3.0a and earlier. Public references describe an authenticated file-upload path enabling root access (RCE) and a...
CVE-2019-7275
CVE-2019-7275 affects Optergy Proton/Enterprise Building Management System (
CVE-2019-7275
Optergy Proton/Enterprise devices allow Open Redirect...
CVE-2019-7277
CVE-2019-7277 (Optergy Proton/Enterprise) affects Optergy Proton/Enterprise Building Management System. Public sources cite an unauthenticated internal network information disclosure vulnerability, enabling an attacker to obtain sensitive system details (e.g., internal IP, hostname, DNS informati...