CVE-2016-2278 in Struxureware Building Operations Automation Server

الملخص

بحسب MITRE

Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeating an msh (aka Minimal Shell) protection mechanism.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• حجز: 08/02/2016
• إفشاء: 02/03/2016
• الاعتدال: تمت الموافقة
• إدخال: VDB-81140
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• استغلال: تحميل
• CVSS: 7.2 (NVD)
• EPSS: 0.14044
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Transportation, Government, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2278
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2278
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2278/