Proton
by Optergy
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-7276 | Cri | 0.74 | 9.8 | 0.93 | Jul 1, 2019 | Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. | ||
| CVE-2019-7274 | Cri | 0.69 | 9.8 | 0.29 | Jul 1, 2019 | Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root. | ||
| CVE-2019-7273 | Hig | 0.61 | 8.8 | 0.04 | Jul 1, 2019 | Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF). | ||
| CVE-2019-7279 | Hig | 0.48 | 7.3 | 0.02 | Jul 1, 2019 | Optergy Proton/Enterprise devices have Hard-coded Credentials. | ||
| CVE-2019-7278 | Med | 0.42 | 6.5 | 0.02 | Jul 1, 2019 | Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service. | ||
| CVE-2019-7275 | Med | 0.40 | 6.1 | 0.09 | Jul 1, 2019 | Optergy Proton/Enterprise devices allow Open Redirect. | ||
| CVE-2019-7272 | Med | 0.38 | 5.3 | 0.10 | Jul 1, 2019 | Optergy Proton/Enterprise devices allow Username Disclosure. | ||
| CVE-2019-7277 | Med | 0.35 | 5.3 | 0.02 | Jul 1, 2019 | Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure. |
- risk 0.74cvss 9.8epss 0.93
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.
- risk 0.69cvss 9.8epss 0.29
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
- risk 0.61cvss 8.8epss 0.04
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
- risk 0.48cvss 7.3epss 0.02
Optergy Proton/Enterprise devices have Hard-coded Credentials.
- risk 0.42cvss 6.5epss 0.02
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
- risk 0.40cvss 6.1epss 0.09
Optergy Proton/Enterprise devices allow Open Redirect.
- risk 0.38cvss 5.3epss 0.10
Optergy Proton/Enterprise devices allow Username Disclosure.
- risk 0.35cvss 5.3epss 0.02
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.