CVE-2019-7274

概要

参考情報

• packetstormsecurity.com/files/155269/Optergy-2.3.0a-Remote-Root.html · Exploit
• securityfocus.com/bid/108686 · Broken Link
• applied-risk.com/labs/advisories · Broken Link
• applied-risk.com/resources/ar-2019-008 · Third Party Advisory

enterprise のその他の脆弱性

• CVE-2019-7273高 8.8Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
• CVE-2019-7272中 5.3Optergy Proton/Enterprise devices allow Username Disclosure.
• CVE-2019-7278中 6.5Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
• CVE-2019-7277中 5.3Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
• CVE-2019-7276緊急 9.8Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.