ICSA-19-157-01

Optergy Proton Enterprise Building Management System

view advisory published 2019-06-06

Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and gain full system access.

describes (7)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-7274US	critical9.8	29.0% (98th)	Exploit	2019-07-01
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
CVE-2019-7273US	high8.8	4.48% (91st)	Exploit	2019-07-01
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
CVE-2019-7272US	medium5.3OT elevated	10.5% (96th)	Exploit	2019-07-01
Optergy Proton/Enterprise devices allow Username Disclosure.
CVE-2019-7278US	medium6.5OT elevated	1.52% (74th)	—	2019-07-01
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
CVE-2019-7277US	medium5.3	1.95% (80th)	—	2019-07-01
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
CVE-2019-7276US	critical9.8	93.4% (100th)	Exploit	2019-07-01
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.
CVE-2019-7275US	medium6.1	9.09% (95th)	—	2019-07-01
Optergy Proton/Enterprise devices allow Open Redirect.

External citations — patches, advisories, analysis.

MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.