Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_eelctric:ecostruxure_building_operation_workstation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Eelctric (a7b4ce5f-0e1b-5c95-84f0-214a0e704130)
ProductEcostruxure Building Operation Workstation (260cb8ea-fec9-5974-9304-63c7b4ebaddb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8449 vulnerable 2026-06-08 07:45:20.157401 Details available
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.
Published: 2025-08-20T13:55:34.397Z
Updated: 2025-09-09T20:50:55.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8448 vulnerable 2026-06-08 07:45:20.155631 Details available
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and the vulnerable products.
Published: 2025-08-20T13:58:53.818Z
Updated: 2025-09-09T20:55:43.384Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.