CVE-2019-7272: Optergy Proton/Enterprise devices allow Username Disclosure.

Security readout for executives and security teams

CVE-2019-7272 is a username disclosure issue in Optergy Proton/Enterprise devices. Username exposure can support targeted phishing, password guessing, or later intrusion attempts, especially against building-management systems. The supplied sources do not establish remote code execution, device takeover, a patch, or active exploitation. Likely exposure is organizations running Optergy Proton/Enterprise or related Optergy BMS interfaces. Risk is higher if account reset or login functions are reachable from untrusted networks. Exact affected versions are not defined in the CVE bundle. Treat this as a targeted exposure management issue for building-management environments. Prioritize if Optergy systems manage physical facilities or are internet-facing. Urgency is lower than confirmed exploited critical flaws, but username disclosure can materially help follow-on attacks. Mitigation focus: Inventory Optergy Proton, Enterprise, and BMS deployments.; Check Optergy and Applied Risk guidance for affected versions and fixes.; Remove public internet access to management and account reset interfaces..

Prepared

Jun 6, 2026, 20:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.