CVE-2019-7277: Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.

Security readout for executives and security teams

CVE-2019-7277 reports that Optergy Proton/Enterprise devices can disclose internal network information without authentication. The public bundle does not provide versions, CVSS, or named fixes. Treat it as a confidentiality risk for building or operational environments where these systems are reachable by untrusted users. Exposure is most likely where Optergy Proton/Enterprise interfaces are deployed on reachable operational, building-management, or corporate networks. The source bundle does not identify affected versions or internet exposure requirements. Prioritize discovery and exposure reduction if these devices support building operations or sit near sensitive networks. Business urgency depends on reachability because the public record lacks severity scoring and exploit evidence. Mitigation focus: Check Applied Risk AR-2019-008 and vendor guidance for affected builds and remediation.; Inventory Optergy Proton/Enterprise deployments and record software or firmware versions.; Restrict device administrative interfaces to trusted management networks pending confirmed remediation..

Prepared

Jun 6, 2026, 20:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.