Schneider Eelctric
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| EcoStruxure Building Operation Workstation | 2 | – | Aug 20, 2025 |
| EcoStruxure Building Operation Enterprise Server | 1 | – | Aug 20, 2025 |
Exploited and recent CVEs
- CVE-2025-8448 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB 0.2%
- CVE-2025-8448 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB 0.2%
- CVE-2025-8449 CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the 0.3%