CVE-2019-7276

This exploit leverages an unauthenticated backdoor in Optergy BMS to execute arbitrary commands as root by bypassing authentication via a challenge-response mechanism. It sends a crafted POST request with a computed SHA1 and MD5 hash to achieve remote code execution.

This Metasploit module exploits an undocumented backdoor in Optergy Proton and Enterprise BMS (CVE-2019-7276) by leveraging a challenge-response mechanism to execute arbitrary commands as root via sudo. The exploit interacts with the Console.jsp backdoor script to achieve remote code execution.