Optergy Proton Enterprise Building Management System
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and gain full system access.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-7274US | critical9.8 | Exploit | ||
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root. | ||||
| CVE-2019-7273US | high8.8 | Exploit | ||
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF). | ||||
| CVE-2019-7272US | medium5.3OT erhöht | Exploit | ||
Optergy Proton/Enterprise devices allow Username Disclosure. | ||||
| CVE-2019-7278US | medium6.5OT erhöht | — | ||
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service. | ||||
| CVE-2019-7277US | medium5.3 | — | ||
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure. | ||||
| CVE-2019-7276US | critical9.8 | Exploit | ||
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. | ||||
| CVE-2019-7275US | medium6.1 | — | ||
Optergy Proton/Enterprise devices allow Open Redirect. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-19-157-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (7)
- MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
- MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
- MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
- MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
- MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
- MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
- MitigationProton/Enterprise
Always regularly update your software. Optergy updates always include stability, security, and other enhancements to maximize performance and reduce risk of downtime.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan