Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 14.0%.
Schneider Electric
Authentication Bypass
Struxureware Building Operations Automation Server As Firmware
Struxureware Building Operations Automation Server As P Firmware
NVD
Exploit-DB
CVSS 3.0
7.2
EPSS
14.0%