CVE-2019-7273

Optergy Proton/Enterprise devices allow Cross-Site Request Forgery CSRF...

CVE-2019-7274

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root...

CVE-2019-7274

CVE-2019-7274 affects Optergy Proton/Enterprise. The vulnerability is an authenticated file upload that can lead to remote code execution as root in Optergy Proton/Enterprise versions 2.3.0a and earlier. Public references describe an authenticated file-upload path enabling root access (RCE) and a...

CVE-2019-7275

CVE-2019-7275 affects Optergy Proton/Enterprise Building Management System (

CVE-2019-7275

Optergy Proton/Enterprise devices allow Open Redirect...

CVE-2019-7277

CVE-2019-7277 (Optergy Proton/Enterprise) affects Optergy Proton/Enterprise Building Management System. Public sources cite an unauthenticated internal network information disclosure vulnerability, enabling an attacker to obtain sensitive system details (e.g., internal IP, hostname, DNS informati...

CVE-2019-7277

Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...

CVE-2019-7278

Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service...

CVE-2019-7278

CVE-2019-7278 affects Optergy Proton/Enterprise Building Management System. Root cause: Exposed Dangerous Method or Function (CWE-749) allowing unauthenticated access to a sensitive function. Impact: cryptic in public docs, but CVSSv3 base score is 7.3 (medium-high) with network access, no user i...

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

Hardcoded credentials

Optergy Proton/Enterprise devices have Hard-coded Credentials...

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

CVE-2019-7279

Optergy Proton/Enterprise devices are affected by CVE-2019-7279, which involves hard-coded credentials in the system. The issue impacts Proton/Enterprise software (versions 2.3.0a and earlier) and is identified as Use of Hard-Coded Credentials (CWE-798). The NVD entry assigns CVSSv3 base score 7....

CVE-2019-7273: Cross-Site Request Forgery (CSRF)

Optergy Proton/Enterprise devices allow Cross-Site Request Forgery CSRF...

CVE-2019-7277: Undefined Security Weakness

Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure...

PT-2019-18504 · Optergy · Optergy Proton/Enterprise

Name of the Vulnerable Software and Affected Versions: Optergy Proton/Enterprise devices affected versions not specified Description: The issue allows authenticated file upload with code execution as root. Recommendations: At the moment, there is no information about a newer version that contains...

CVE-2019-7272: Missing Authorization

Optergy Proton/Enterprise devices allow Username Disclosure...

CVE-2019-7276

Optergy Proton/Enterprise Building Management Systems (BMS) are vulnerable to Remote Root Code Execution due to hidden functionality (CVE-2019-7276). Specifically, an unauthenticated attacker can navigate directly to an undocumented backdoor script called Console.jsp in the tools directory to gai...

PT-2019-18503 · Optergy · Optergy Proton/Enterprise

Name of the Vulnerable Software and Affected Versions: Optergy Proton/Enterprise devices affected versions not specified Description: The issue allows Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application...