CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

Hardcoded credentials

Optergy Proton/Enterprise devices have Hard-coded Credentials...

CVE-2019-7279

Optergy Proton/Enterprise devices are affected by CVE-2019-7279, which involves hard-coded credentials in the system. The issue impacts Proton/Enterprise software (versions 2.3.0a and earlier) and is identified as Use of Hard-Coded Credentials (CWE-798). The NVD entry assigns CVSSv3 base score 7....

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

PT-2019-18505 · Optergy · Optergy Proton/Enterprise

Name of the Vulnerable Software and Affected Versions: Optergy Proton/Enterprise affected versions not specified Description: The issue allows for Open Redirect, which could potentially be exploited by attackers to redirect users to malicious websites. Recommendations: At the moment, there is no...

CVE-2019-7276

Optergy Proton/Enterprise BMS is affected by CVE-2019-7276: unauthenticated remote code execution via a backdoor console. Public details show an undocumented backdoor script (Console.jsp) in the tools directory that enables full root access on vulnerable versions (notably 2.0.3a and earlier). Exp...

PT-2019-18506 · Optergy · Optergy Proton/Enterprise

Name of the Vulnerable Software and Affected Versions: Optergy Proton/Enterprise devices affected versions not specified Description: The issue allows for remote root code execution via a backdoor console. Recommendations: At the moment, there is no information about a newer version that contains...

PT-2019-18503 · Optergy · Optergy Proton/Enterprise

Name of the Vulnerable Software and Affected Versions: Optergy Proton/Enterprise devices affected versions not specified Description: The issue allows Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application...

PT-2019-18504 · Optergy · Optergy Proton/Enterprise

Name of the Vulnerable Software and Affected Versions: Optergy Proton/Enterprise devices affected versions not specified Description: The issue allows authenticated file upload with code execution as root. Recommendations: At the moment, there is no information about a newer version that contains...

CVE-2019-7276

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...

Optergy Proton/Enterprise Arbitrary Code Execution Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. A security vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability can be exploited by an attacker to navigate directly to an undocumented backdoor script, gain full...

Optergy Proton/Enterprise Input Validation Error Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An input validation error vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability arises from a network system or product that does not properly validate input data...

Optergy Proton/Enterprise Arbitrary Code Execution Vulnerability (CNVD-2019-24770)

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An arbitrary code execution vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability stems from an improper design or implementation during code development of a network...

Optergy Proton/Enterprise Authentication Error Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An authentication error vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. An attacker could exploit the vulnerability to gain direct party access to specific resources...

Optergy Proton/Enterprise Trust Management Issue Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. A vulnerability with trust management issues exists in Optergy Proton/Enterprise 2.3.0a and prior versions. The vulnerability stems from the lack of an effective trust management mechanism in a networked syste...

Optergy Proton/Enterprise Information Disclosure Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An information disclosure vulnerability exists in Optergy Proton/Enterprise version 2.3.0a and prior versions, which can be exploited by an unauthorized attacker to obtain sensitive information about an affect...

Optergy Proton/Enterprise Cross-Site Request Forgery Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. A cross-site request forgery vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier, which can be exploited by an attacker to send unintended requests to the server via an affected clien...

Optergy Proton/Enterprise Information Disclosure Vulnerability (CNVD-2019-16983)

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An information disclosure vulnerability exists in Optergy Proton/Enterprise version 2.3.0a and prior versions, which can be exploited by an unauthorized attacker to obtain sensitive information about an affect...

qpid-proton: TLS Man in the Middle Vulnerability

A cryptographic weakness was discovered in qpid-proton's use of TLS. If the qpid-proton client was used without client certificates, it would accept an anonymous cipher offered by the server. A man-in-the-middle attacker could use this to silently intercept traffic that should have been encrypted...

Moderate: Red Hat Security Advisory: qpid-proton security update

An update for qpid-proton is now available for Red Hat OpenStack Platform 14 Rocky. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...