CVE-2019-7275: Optergy Proton/Enterprise devices allow Open Redirect.

Security readout for executives and security teams

CVE-2019-7275 is an open redirect issue in Optergy Proton/Enterprise devices. A trusted device link may redirect a user to an external site, supporting phishing or credential-theft scenarios. The supplied record does not show CVSS scoring, confirmed fixes, or active exploitation. Organizations using Optergy Proton/Enterprise building management systems may be exposed, especially if device web interfaces are reachable by users or from less-trusted networks. Internet exposure is not established by the supplied sources. Treat this as a targeted phishing and trust-abuse risk for building management environments. Prioritize asset identification and vendor guidance review, but urgency is constrained by missing severity, fix, and exploitation evidence. Mitigation focus: Check Optergy or Applied Risk guidance for fixed versions or vendor mitigations.; Restrict access to Proton/Enterprise web interfaces to trusted networks and users.; Avoid exposing building management interfaces directly to the internet..

Prepared

Jun 6, 2026, 20:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.