CVE-2025-8448 | Schneider Electric EcoStruxureTM Building Operation Enterprise Server SMB information disclosure (SEVD-2025-224-04)

A vulnerability described as problematic has been identified in Schneider Electric EcoStruxureTM Building Operation Enterprise Server, EcoStruxureTM Enterprise Server and EcoStruxureTM Workstation up to 7.0.0. This issue affects some unknown processing of the component SMB Handler. The manipulation results in information disclosure.

This vulnerability was named CVE-2025-8448. The attack needs to be approached within the local network. There is no available exploit.

Upgrading the affected component is recommended.