Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_eelctric:ecostruxure_building_operation_enterprise_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Eelctric (a7b4ce5f-0e1b-5c95-84f0-214a0e704130)
ProductEcostruxure Building Operation Enterprise Server (12dfce36-cacf-51fe-81ba-04501fd912a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8448 vulnerable 2026-06-08 07:45:20.154508 Details available
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and the vulnerable products.
Published: 2025-08-20T13:58:53.818Z
Updated: 2025-09-09T20:55:43.384Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.