CVE-2019-7273

Description

References

• packetstormsecurity.com/files/155265/Optergy-Proton-Enterprise-BMS-2.0.3a-Cross-Site-Request-Forgery.html · Third Party Advisory
• securityfocus.com/bid/108686 · Broken Link
• applied-risk.com/labs/advisories · Broken Link
• applied-risk.com/resources/ar-2019-008 · Third Party Advisory

Weitere Schwachstellen in enterprise

• CVE-2019-7274KRITISCH 9.8Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
• CVE-2019-7272MITTEL 5.3Optergy Proton/Enterprise devices allow Username Disclosure.
• CVE-2019-7278MITTEL 6.5Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
• CVE-2019-7277MITTEL 5.3Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
• CVE-2019-7276KRITISCH 9.8Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.