CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.
CVSS 4.0MEDIUM 4.1·Adjacent network·Low privileges·User interaction·EPSS 0.00259·Published 2025-08-20·Fixed in 7.0.2.348, All 6.x versions +3CWE-400
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a v…
