CVE:CVE-2021-31891
CNNVD:CNNVD-202109-931
Siemens Desigo CC是德国西门子（Siemens）公司的一款开放式楼宇管理平台,用于产生舒适、安全和高效的设施。
Siemens Desigo CC 中存在操作系统命令注入漏洞，该漏洞源于产品未对Http Get请求数据做有效验证。攻击者可通过该漏洞执行任意代码。
solution:Upgrade siemens desigo_cc to a higher version than *; Upgrade siemens siveillance_control_pro to a higher version than *; Upgrade siemens gma-manager to a higher version than *; Upgrade siemens operation_scheduler to a higher version than *; Upgrade siemens siveillance_control to a higher version than *