Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Optergy records in CISA KEVNo Optergy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority CRITICAL 86
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.93384 · Published 2019-07-01 · No fix listed
Priority HIGH 65
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.29043 · Published 2019-07-01 · No fix listed CWE-434
Priority MEDIUM 45
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04476 · Published 2019-07-01 · No fix listed CWE-352
Priority LOW 39
Optergy Proton/Enterprise devices allow Open Redirect.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.09047 · Published 2019-07-01 · No fix listed CWE-601
Priority LOW 37
Optergy Proton/Enterprise devices allow Username Disclosure.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.10469 · Published 2019-07-01 · No fix listed CWE-862
Priority LOW 36
Optergy Proton/Enterprise devices have Hard-coded Credentials.
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.01799 · Published 2019-07-01 · No fix listed CWE-798
Priority LOW 32
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01516 · Published 2019-07-01 · No fix listed CWE-269
Priority LOW 28
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0195 · Published 2019-07-01 · No fix listed
THREATIST.IORead the docs