PatchTheCVEoptergy vulnerabilities
Recent CVEs affecting optergy products. 8 tracked.
optergy has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2019-07-01. Highest priority: CVE-2019-7276 (score 69/100).
- CVE-2019-7279 HIGH 7.3 UPGRADE UPGRADE Optergy Proton/Enterprise devices have Hard-coded Credentials.
- CVE-2019-7278 MEDIUM 6.5 UPGRADE UPGRADE Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
- CVE-2019-7277 MEDIUM 5.3 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
- CVE-2019-7276 CRITICAL 9.8 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.
- CVE-2019-7275 MEDIUM 6.1 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Open Redirect.
- CVE-2019-7274 CRITICAL 9.8 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
- CVE-2019-7273 HIGH 8.8 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
- CVE-2019-7272 MEDIUM 5.3 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Username Disclosure.
FAQ
How do I fix optergy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is optergy being exploited right now?
None of the tracked optergy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which optergy CVE should I patch first?
CVE-2019-7276 currently ranks highest (69/100): Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console..