CVE-2019-7274: Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

Security readout for executives and security teams

CVE-2019-7274 describes an authenticated file upload issue in Optergy Proton/Enterprise devices that can lead to code execution as root. That means a valid user with access to the affected function could potentially take full control of the device. Public sources do not provide complete affected-version or fix details in the supplied bundle. Exposure is most relevant to organizations running Optergy Proton or Enterprise building-management devices, especially where authenticated management access is broadly available or externally reachable. The supplied data does not identify exact affected versions or deployment conditions. Treat this as high priority if Optergy devices are present. Root-level compromise of building-management systems can affect operations, safety-adjacent availability, and incident response. Prioritize inventory, access restriction, and vendor fix confirmation before broader remediation planning. Mitigation focus: Identify any Optergy Proton or Enterprise devices in the environment.; Check Optergy or Applied Risk guidance for affected versions and fixes.; Restrict management access to trusted administrative networks only..

Prepared

Jun 6, 2026, 20:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.