Schneider Electric Building Operation Automation Server Vulnerability

CVEs (1)

Remediations

• Schneider Electric has released a new version of Automation Server firmware which remediates this vulnerability. The user is no longer allowed to operate the system with default credentials and the minimal “msh” shell can no longer be circumvented. Users should contact their authorized Schneider Electric service channel to access the firmware update.
• For more information, please see Schneider Electric’s Security Notification number SEVD-2016-025-01 at the following location on their web site: (http://www.schneider-electric.com/ww/en/download/document/SEVD-2016-025-01)

Affected Vendors

Affected Products (1)