1000
VMScore

CVE-2019-7274

Published: 01/07/2019 Updated: 13/10/2022
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

optergy proton

optergy enterprise

Exploits

# Title: Optergy 230a - Remote Code Execution # Author: LiquidWorm # Date: 2019-11-05 # Vendor: optergycom/ # Product web page: optergycom/products/ # Affected version: <=230a # Advisory: applied-riskcom/resources/ar-2019-008 # Paper: applied-riskcom/resources/i-own-your-building-management-system # CVE: C ...
Optergy versions 230a and below authenticated file upload remote root code execution exploit ...