Optergy Proton/Enterprise BMS 2.0.3a Cross Site Request Forgery

Optergy Proton/Enterprise BMS CSRF Add Admin Affected version: history.pushState'', '', '/' input type="hidden" name="user.visibleAlarms" value...

CVE-2019-7274

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root...

CVE-2019-7273

Optergy Proton/Enterprise devices allow Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

Optergy Proton/Enterprise devices allow Cross-Site Request Forgery CSRF...

CVE-2019-7276

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...

CVE-2019-7275

Optergy Proton/Enterprise devices allow Open Redirect...

Open redirect

Optergy Proton/Enterprise devices allow Open Redirect...

CVE-2019-7274

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root...

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

PT-2019-18503 · Optergy · Optergy Proton/Enterprise

Name of the Vulnerable Software and Affected Versions: Optergy Proton/Enterprise devices affected versions not specified Description: The issue allows Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application...

Optergy Proton/Enterprise Arbitrary Code Execution Vulnerability (CNVD-2019-24770)

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An arbitrary code execution vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability stems from an improper design or implementation during code development of a network...

Optergy Proton/Enterprise Input Validation Error Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An input validation error vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability arises from a network system or product that does not properly validate input data...

Optergy Proton/Enterprise Authentication Error Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An authentication error vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. An attacker could exploit the vulnerability to gain direct party access to specific resources...

Optergy Proton/Enterprise Arbitrary Code Execution Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. A security vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability can be exploited by an attacker to navigate directly to an undocumented backdoor script, gain full...

Optergy Proton/Enterprise Trust Management Issue Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. A vulnerability with trust management issues exists in Optergy Proton/Enterprise 2.3.0a and prior versions. The vulnerability stems from the lack of an effective trust management mechanism in a networked syste...

Optergy Proton/Enterprise Cross-Site Request Forgery Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. A cross-site request forgery vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier, which can be exploited by an attacker to send unintended requests to the server via an affected clien...

Optergy Proton/Enterprise Information Disclosure Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An information disclosure vulnerability exists in Optergy Proton/Enterprise version 2.3.0a and prior versions, which can be exploited by an unauthorized attacker to obtain sensitive information about an affect...

Optergy Proton/Enterprise Information Disclosure Vulnerability (CNVD-2019-16983)

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An information disclosure vulnerability exists in Optergy Proton/Enterprise version 2.3.0a and prior versions, which can be exploited by an unauthorized attacker to obtain sensitive information about an affect...

Optergy Proton Enterprise Building Management System

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Optergy Equipment: Proton/Enterprise Building Management System Vulnerabilities: Information Exposure, Cross-site Request Forgery, Unrestricted Upload of File with Dangerous Type, Open Redirect,...