Skip to content
OpenAdvisories
Critical ICSA-19-157-01 7 CVEs

Optergy Proton Enterprise Building Management System

Published Jun 6, 2019 · Updated Jun 6, 2019

Vendor: Optergy Product: Proton/Enterprise

Summary

Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and gain full system access.

Vulnerabilities 7

  • Unscored —
    CVE-2019-7272 Public exploit EPSS 10%

    Optergy Proton/Enterprise devices allow Username Disclosure.

  • Unscored —
    CVE-2019-7273 Public exploit

    Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).

  • Unscored —
    CVE-2019-7274 Public exploit EPSS 29%

    Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

  • Unscored —
    CVE-2019-7275 Scanner template

    Optergy Proton/Enterprise devices allow Open Redirect.

  • Unscored —
    CVE-2019-7276 Public exploit Scanner template EPSS 93%

    Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.

  • Unscored —
    CVE-2019-7277

    Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.

  • Unscored —
    CVE-2019-7278

    Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.

Revision history

  1. #1

    ICSA-19-157-01 Optergy Proton Enterprise Building Management System

References