CVE-2019-7276

Mô tả

Tham khảo

• packetstormsecurity.com/files/171564/Optergy-Proton-And-Enterprise-BMS-2.0.3a-Command-Injection.html
• securityfocus.com/bid/108686 · Third Party Advisory
• applied-risk.com/labs/advisories · Third Party Advisory
• applied-risk.com/resources/ar-2019-008 · Third Party Advisory

Lỗ hổng khác của enterprise

• CVE-2019-7274NGHIÊM TRỌNG 9.8Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
• CVE-2019-7273CAO 8.8Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
• CVE-2019-7272TRUNG BÌNH 5.3Optergy Proton/Enterprise devices allow Username Disclosure.
• CVE-2019-7278TRUNG BÌNH 6.5Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
• CVE-2019-7277TRUNG BÌNH 5.3Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.