Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:ecostruxure_enterprise_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductEcostruxure Enterprise Server (84b13bd3-49c2-5a37-8a5d-762f640199e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8449 not_vulnerable 2026-06-08 07:45:20.157232 Details available
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.
Published: 2025-08-20T13:55:34.397Z
Updated: 2025-09-09T20:50:55.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8448 vulnerable 2026-06-08 07:45:20.155064 Details available
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and the vulnerable products.
Published: 2025-08-20T13:58:53.818Z
Updated: 2025-09-09T20:55:43.384Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.