EcoStruxure Building Operation XML External Object Access

The vulnerability of the EcoStruxure Building Operation Workstation interface and the EcoStruxure Building Operation WebStation software’s web interface is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow an attacker to gain unauthorize...

EcoStruxure Building Operation Workstation Interface Code Execution

The vulnerability of the EcoStruxure Building Operation Workstation interface and the EcoStruxure Building Operation WebStation software’s web interface is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially creat...

EcoStruxure Building Operation Enterprise Central Server Workstation Unauthorized Access

The vulnerabilities of the EcoStruxure Building Operation Enterprise Central, EcoStruxure Building Operation Enterprise Server, and the EcoStruxure Workstation interface are related to insufficient protection of operational data. Exploiting these vulnerabilities can allow unauthorized actors to...