PT-2019-18506 · Optergy · Optergy Proton/Enterprise

Published 2019-07-01 · Updated 2023-03-28 · CVE-2019-7276

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Optergy Proton/Enterprise devices (affected versions not specified)

Description The issue allows for remote root code execution via a backdoor console.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2019-7276

Affected Products

Optergy Proton/Enterprise

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/optergy_bms_backdoor_rce_cve_2019_7276.rb · Exploit
• 🔥 https://exploit-db.com/exploits/47641 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7276 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7276 · Vendor Advisory
• http://securityfocus.com/bid/108686 · Note
• https://applied-risk.com/resources/ar-2019-008 · Note
• https://applied-risk.com/labs/advisories · Note
• http://packetstormsecurity.com/files/171564/Optergy-Proton-And-Enterprise-BMS-2.0.3a-Command-Injection.html · Note