CVE:CVE-2016-2278
CNNVD:CNNVD-201603-002
Schneider Electric StruxureWare Building Operation Application Server是法国施耐德电气（Schneider Electric）公司的一套用于中小型建筑楼宇的自动化系统。
Schneider Electric Struxureware Building Operations Automation Server AS 1.7及之前版本和AS-P 1.7及之前版本中存在安全漏洞。远程攻击者可通过破坏msh保护机制利用该漏洞执行任意操作系统命令。
solution:Upgrade schneider-electric struxureware_building_operations_automation_server_as_firmware to a higher version than 1.7,and avoid the version (,1.7]; Upgrade schneider-electric struxureware_building_operations_automation_server_as-p_firmware to a higher version than 1.7,and avoid the version 1.7