445 matches found
CVE-2019-7273
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7274
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root...
CVE-2019-7272
Optergy Proton/Enterprise devices allow Username Disclosure...
Design/Logic Flaw
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root...
Design/Logic Flaw
Optergy Proton/Enterprise devices allow Username Disclosure...
Cross site request forgery (csrf)
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7276
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...
CVE-2019-7278
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service...
CVE-2019-7277
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...
CVE-2019-7278
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service...
CVE-2019-7277
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...
CVE-2019-7276
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...
CVE-2019-7275
Optergy Proton/Enterprise devices allow Open Redirect...
CVE-2019-7275
Optergy Proton/Enterprise devices allow Open Redirect...
Information disclosure
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...
Open redirect
Optergy Proton/Enterprise devices allow Open Redirect...
Design/Logic Flaw
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service...
Remote code execution
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...
CVE-2019-7272
CVE-2019-7272 affects Optergy Proton/Enterprise (versions ≤ 2.3.0a). The vulnerability is an information exposure via the username reset functionality, enabling an unauthorized attacker to enumerate usernames and, per Red Hat/CISA references, reveal internal details on the targeted system. Public...
CVE-2019-7273
CVE-2019-7273 affects Optergy Proton/Enterprise Building Management Systems (versions ≤ 2.3.0a). The issue is Cross-Site Request Forgery (CSRF) that can enable an attacker to perform privileged actions (e.g., adding an admin) via forged requests from a logged-in user. Public PoCs/exploits exist (...