CVE-2019-7273: Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).

Security readout for executives and security teams

CVE-2019-7273 reports Cross-Site Request Forgery in Optergy Proton/Enterprise building management devices. The provided sources do not supply a severity score, detailed impact, or confirmed fix. Treat it as a potential operational-technology web management risk until asset ownership and vendor guidance are confirmed. Exposure is most relevant where Optergy Proton/Enterprise building management interfaces are deployed and reachable by users with administrative sessions. Evidence is insufficient to quantify internet exposure or affected version coverage from the supplied bundle alone. Set priority after confirming whether these BMS devices are present. If present in facilities or critical operations, treat as a focused OT remediation item because the public record lacks severity and fix clarity. Mitigation focus: Identify whether Optergy Proton/Enterprise devices exist in your environment.; Check Optergy or Applied Risk guidance for supported remediation.; Restrict management interface access to trusted administrative networks..

Prepared

Jun 6, 2026, 20:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.