Schneider Electric Ecostruxure Enterprise Server vulnerabilities

2 vulnerabilities

Known vulnerabilities in Schneider Electric Ecostruxure Enterprise Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.1CVE-2025-8449schneider eelctricecostruxure building operation workstation+2
EPSS score
0.26%
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.1CVE-2025-8448schneider eelctricecostruxure building operation enterprise server+2
EPSS score
0.20%
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and the vulnerable products.