Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Schneider Electric EcoStruxure Enterprise Server 5.0.3.17009 (CP16), 6.0.4.10001 (CP8), 7.0.2.348 Clear all filters
TI-2025-07734 CVE-2025-8448 · GHSA-w6r8-h9q4-qq7v

Information disclosure in Schneider Eelctric EcoStruxure Building Operation Enterprise…

Priority LOW 6

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a v…

CVSS 4.0LOW 1.0 Adjacent network Low privileges User interaction EPSS 0.00198 Published 2025-08-20 Fixed in 7.0.2.348, 6.0.4.10001 (CP8) +1 CWE-200
TI-2025-07735 CVE-2025-8449 · GHSA-mwcm-qxp3-wwj9

Uncontrolled resource consumption in Schnieder Electric EcoStruxure Building Operation…

Priority LOW 19

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.

CVSS 4.0MEDIUM 4.1 Adjacent network Low privileges User interaction EPSS 0.00259 Published 2025-08-20 Fixed in 7.0.2.348, All 6.x versions +3 CWE-400